We appreciate your interest in our website. The protection of your privacy when processing personal data, as well as the security of all business data, is an important concern for us, which we take into account in our business processes. Below we inform you in detail about how we handle your data.
RESPONSIBLE ACC. ART. 4 NO. 7 EU GENERAL DATA PROTECTION REGULATION (EU-GDPR)
Mailänder Str. 2
T: +49 511 515151-0
E: [email protected]
DATA PROTECTION OFFICER OF THE RESPONSIBLE PARTY
Dr Ralf W. Schadowski
E: [email protected]
T: +49 241 44688 25
§ 1 LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
(1) Insofar as we obtain the consent for processing personal data, art. 6 (1a) of the EU General Data Protection Regulation (EU-GDPR) serves as the legal basis.
(2) When processing personal data necessary for the performance of a contract to which the data subject is party, art. 6 (1b) of the EU-GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
(3) Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, art. 6 (1c) of the EU-GDPR serves as the legal basis.
(4) In the event that vital interests of the data subject or another natural person make processing of personal data necessary, art. 6 (1d) of the EU-GDPR serves as the legal basis.
(5) If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, art. 6 (1f) of the EU-GDPR serves as the legal basis for the processing.
§ 2 DELETION OF DATA AND STORAGE PERIOD
(1) The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply.
(2) Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject.
(3) Data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
§ 3 INFORMATION ON THE COLLECTION OF PERSONAL DATA
(1) In the following we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
(2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
(3) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period. Collection of personal data when visiting our website: When using the website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis for this is art. 6 (1f) of the EU-GDPR):
- IP address
- Host name
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request came (referrer)
- The specific pages of our website that you have accessed
- Browser: Type, version and language
- Operating system: type and version
- Screen resolution
- Colour depth
- Size of the browser window
- Installed browser plugin
(1) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie with certain information. Cookies cannot execute programs or transmit viruses to your computer. They are used to make the website as a whole more user-friendly and effective.
(2) This website uses the following types of cookies, the scope and function of which are explained below:
Transient cookies (see b)
- Persistent cookies (see c)
- Flash cookies (see f)
b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. So-called "third party cookies" are cookies that have been set by a third party, thus not by the actual website you are currently visiting.
Please note that you may then not be able to use all the functions of this website.
f) The Flash cookies used are not collected by your browser, but by your Flash plug-in. Furthermore, we use HTML5 storage objects that are stored on your end device. These objects store the required data independently of the browser you are using and have no automatic expiry date. You can configure the setting and deletion of Flash cookies via the Adobe Flash Player settings manager at http://www.macromedia.com/support/documentation/de/flashplayer/help/settings_manager07.html
Alternatively, if you do not want Flash cookies to be processed, you can install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you regularly delete your cookies and browser history manually.
§ 4 FURTHER FUNCTIONS AND OFFERS OF OUR WEBSITE
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you will usually have to provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) When you contact the service provider by e-mail, your e-mail address and, if you so indicate, your name, telephone number and [...] will be stored by us in order to answer your questions.
(3) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(4) Furthermore, we may pass on your personal data to third parties if we offer promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or below in the description of the offer.
(5) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the description of the offer.
§ 5 RIGHTS OF THE DATA SUBJECT
In the following, we inform you about your data subject rights according to art. 15 of the EU-GDPR. You can exercise these rights at any time and contact us directly for this purpose. If you request these rights from us, we will examine them in detail, taking into account the associated legal requirements and obligations. If necessary, we will request further information from you. We will explain the results of our examination and our procedure for fulfilling your request to you in detail. In doing so, it is possible that we will not be able to fully meet your requests in the way you would like. This should not prevent you from claiming your rights from us or from asking us about them. We will be happy to answer any questions you may have.
(1) Right to information
You have the right to request information from us at any time as to whether and which of your personal data is being processed by us. This also includes information on the purposes of the processing, if applicable the recipients to whom we have disclosed your data, the planned storage period and, if applicable, information on the origin of this data if we have not collected it directly from you. In addition, you have the right to a one-time free copy of your personal data stored by us. We reserve the right to charge a reasonable administration fee for making subsequent copies.
(2) Right to rectification
You have the right to ask us to correct any inaccurate data we hold about you. This also includes the right to have incomplete personal data completed.
(3) Right to deletion
You have the right to demand that we delete data we have stored about you. If we have published data about you, this also includes our obligation, within the framework of the "right to be forgotten" pursuant to Article 17 (2) of the EU-GDPR, to forward all links to this data and copies or replications of this data to other controllers of this published personal data, taking into account available technology and implementation costs.
(4) Right to restrict processing
You have the right to request that we restrict the processing of data we hold about you. After that, processing of this data is only possible with your consent or for a few purposes specified by law.
(5) Right to object to processing
Where we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the description of the functions below. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing. Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising via the contact channels listed above.
(6) Right to revoke consent under data protection law
If you have given your consent to the processing of your data, you may revoke it at any time. Such a revocation will affect the permissibility of processing your personal data after you have expressed it to us.
(7) Right to data portability
You have the right to receive data relating to you that you have provided to us from us in a structured, commonly used and machine-readable format for the purpose of transferring it to another controller. At your request and taking into account the available technical possibilities, this also includes direct transfer from us to the other controller.
(8) Right of complaint to a supervisory authority
You have the right to complain at any time to a data protection supervisory authority about our processing of data relating to you.
(9) Automated decision-making including profiling
You have the right to obtain information about the existence of automated decision-making including profiling pursuant to Article 22 (1) and (4) of the EU-GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
§ 6 SPECIAL FORMS OF USE OF WEBSITES
1. Use of the blog functions
(1) In our blog, where we publish various contributions on topics related to our activities, you can make public comments. Your comment will be published with your given name with the post. We recommend using a pseudonym instead of your real name. The name is required, all other information is voluntary. When you post a comment, we continue to store your IP address, which we delete after one week. This storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your email address to contact you if a third party objects to your comment as unlawful. The legal basis for this is art. 6 (1b and f) of the EU-GDPR. Comments are not checked before publication. We reserve the right to delete comments if they are objected to by third parties as unlawful.
2. Use of our live chat
(1) On our website, we offer you the opportunity to chat directly with our employees. In doing so, the data transmitted by your web browser will be collected in accordance with § 3 (1). You can leave us a message outside our chat times via the chat plug-in. In doing so, we will ask for your name and email address so that we can contact you and answer your query.
(3) We use the collected data exclusively for the purpose of operating the live chat and answering your queries as well as for web analysis. With this service, we pursue the goal of better communication with our website visitors as well as an analysis of the use of our website. This serves our interest in increasing the attractiveness of our website. The legal basis for this is art. 6 (1f) of the EU-GDPR.
(4) Only authorised acmeo employees have access to the collected data. Personal data will not be passed on to third parties without your consent or an official order.
§ 7 E-MAIL-BASED INFORMATION SERVICES
1. Newsletter / Press distribution list
(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
(2) We use the so-called double-opt-in procedure to subscribe to our newsletter. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
(3) The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is art. 6 (1a) of the EU- GDPR.
(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email.
§ 8 WEB ANALYTICS
The legal basis for the use of all web analytics tools listed in this section is Article 6 (1f) of the EU-GDPR, i.e. the protection of our legitimate interests in consideration of the interests of our website visitors. Our interest is to analyse the use of our website by our website visitors in order to improve our offer and make it more interesting for you as a user by means of the statistics thus obtained. If the analysis tool used also serves other purposes or we use it for other interests, we will inform you about this directly in the explanations for the respective analysis tool.
1. Use of Google Analytics
(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
(4) This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. If the data collected about you is personally identifiable, this is immediately excluded and the personal data is immediately deleted.
(5) Information of the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
(6) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".
§ 9 SOCIAL MEDIA AND OTHER THIRD PARTY SERVICES
1. Use of social media plug-ins
(1) We currently use the following social media plug-ins: Facebook Pixel. You can recognise the provider of the plug-in by the mark on the box above its initial letter or logo. We open up the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under § 5 of this declaration is transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.
(2) We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.
(3) The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we pursue our interest in offering you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting and attractive for you as a user. The legal basis for the use of the plug-ins is art. 6 (1f) of the EU-GDPR.
(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected by us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you to avoid an assignment to your profile with the plug-in provider.
(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy.
(6) Addresses of the respective plug-in providers and URL with their data protection notices:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php
; further information on data collection: http://www.facebook.com/help/186325668085084
2. Integration of Google Maps
(1) We use the Google Maps service on this website. In doing so, we pursue our interest in increasing the attractiveness of our website by displaying interactive maps directly on our website and enabling you to use the map function conveniently. The legal basis for the use of the plug-in is art. 6 (1f) of the EU-GDPR.
(2) By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under § 5 of this declaration will be transmitted. This occurs regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
3. Integration of other third-party services
(1) On this website, we also use offers from Facebook (Pixel). By using these offers, we can offer you a better user experience on our website. This serves our interest in increasing the attractiveness of our website. The legal basis for the use of these offers is art. 6 (1f) of the EU-GDPR.
(2) By visiting the website, the respective third-party provider receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under § 5 of this declaration is transmitted. This takes place regardless of whether this third-party provider provides a user account via which you are logged in or whether no user account exists. If you are logged in to the third-party provider, your data will be directly assigned to your account. If you do not wish to have your data associated with your profile with the respective third-party provider, you must log out before activating the button. The third-party provider may store your data as a usage profile and may use this for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective third-party provider to exercise this right.
(3) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy:
(4) Addresses of the respective providers and URL with their data protection notices:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php
; further information on data collection: http://www.facebook.com/help/186325668085084
4. Use of Google Adwords Conversion / Remarketing
(1) We use Google Adwords to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, increasing the attractiveness of our website for you and achieving a fair calculation of advertising costs. The legal basis for the processing of your data is art. 6 (1f) of the EU-GDPR.
(2) These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
(3) These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify the users on the basis of this information.
(4) Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
(5) You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving ads from third-party providers, b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "http://www.googleadservices.com
, deleting this setting when you delete your cookies, c) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices
, deleting this setting when you delete your cookies, d) by permanently deactivating them in your browsers Firefox, Internet Explorer or Google Chrome at the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
(6) Further information on data protection at Google can be found here:
Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org
5. Use of LinkedIn tracking / conversion / remarketing