Privacy Policy

Information about the processing of your data 

We have an obligation in accordance with Article 12 GDPR (General Data Protection Regulation; hereinafter: GDPR) to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously and this privacy policy provides you with information about the processing of your data as well as your legal rights in this regard. 

We reserve the right to amend the privacy policy with effect for the future, in particular, to develop the website, for the use of new technologies or when legal bases or the corresponding case law change. 

We recommend that you read the privacy policy from time to time and keep a printed copy with your documents.

Definitions 

  • Website” or “Internet presence” means hereinafter all pages of the responsible organisation at www.meisen.com/de 
  • Personal data” means all information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Therefore, personal data is, for example, the name, email address and telephone number of a persons, but if appropriate, also data regarding preferences, hobbies and memberships.
  • Processing” means operations or sets of operations which are performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • Pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
  • Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
  • Google” hereinafter means Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which can be contacted in the European Union at: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Scope of application 

The privacy policy applies to all websites of www.meissen.com/de. It does not extend to any possibly linked websites or Internet presences of other providers.

Responsible provider 

The processing of personal data within the scope of application of this Privacy Policy is the responsibility of:

Staatliche Porzellan-Manufaktur Meissen GmbH
Talstraße 9, 01662 Meissen
Telephone: +49 (0) 3521 / 4680; fax: +49 (0) 3521 / 468800; email: info [at] meissen [dot] com

represented by:
Dr. Tillmann Blaschke, Georg Nussdorfer

Questions about data protection

Should you have any queries about data protection with regard to our company or our website, you may contact our data protection officer:

Mandatory information on the data protection officer pursuant to Article 37(7) of the General Data Protection Regulation (GDPR):

Spirit Legal LLP Rechtsanwälte
Solicitor and Data Protection Officer
Peter Hense

Postal address:

Data Protection Officer
c/o Staatliche Porzellan-Manufaktur Meissen GmbH, Talstraße 9, 01662 Meissen

Contact via encrypted online form:
Contact Data Protection Officer

Security

We have taken comprehensive technical and organisational precautionary measures to protect your personal data from unauthorised access, misuse, loss or other accidental events.   For this purpose, we regularly review our security measures and improve to the latest state of the art.

Your rights

You have the following rights against us with regard to the personal data concerning you:

  • right of access, Article 15 GDPR),
    • right to rectification (Article 16 GDPR) or erasure (Article 17 GDPR),
    • right to restriction of processing, (Article 18 GDPR),
    • right to object to processing, (Article 21 GDPR),
    • right to withdraw your consent (Article 7(3) GDPR),
    • right to receive the data in a structured, commonly used and machine-readable format (data portability”) as well as the right the right to transmit those data to another responsible organisation, if the conditions of Article  20(1)(a) and (b) GDPR have been met (Article 20 GDPR),

You can establish your rights by sending a notification to the contact details specified in section “Responsible provider” or to the Data Protection Officer appointed by us. 

You also have the right to lodge a complaint with a supervisory authority about our processing of your personal data (Article 77 GDPR).

Use of the website, access data

In general, you may use our website for purely informational purposes without disclosing your identity.  When the individual pages of the website are called up in this sense, access data is transmitted to our webspace provider only to enable the display of the website. They are the following data:

  • type and version of browser
  • operating system used
  • language and version of the browser software
  • host name of the accessing terminal device 
  • IP address
  • website from which the request originates
  • content of the request (specific page)
  • time of the server request
  • access status/HTTP status code
  • referrer URL (the site previously visited)
  • quantity of data transferred
  • time zone difference to Greenwich Mean Time (GMT)

The temporary processing of the IP-address is necessary to enable the delivery of the website to your computer in technical terms. The processing of your IP address is, therefore, required for the duration of the session. The legal basis if this processing is Article 6(1), sentence 1 (f) GDPR.

The access data is not used for the identification of individual users and not combined with other data sources. The access data will be deleted when it is no longer required to achieve the purpose of their processing. This is the case when you are ending your visit to the website, where the data is recorded for the provision of the website.

The IP addresses are stored in log files to ensure the functionality of the website. The data also help us to optimise the website and to ensure the security of our IT system. The data is not analysed for marketing purposes in this context. In general, the data is deleted after no longer than seven days, in individual cases, data may be processed beyond this period. In this case the user’s IP address will be deleted or distorted so that its assignment to the accessing client is no longer possible.

The recording of data for the provision of the website and the processing of data in log files is imperative for the operation of the website. You have a right to object to processing. If your objection is justified, we review the situation and either stop processing the data or make adjustments to the processing, or we demonstrate our compelling legitimate grounds upon which we continue to process the data.

Cookies

In addition to the above-mentioned access data, so-called cookies are stored in the Internet browser of the terminal device you are using when you visit the website. These are small text files with a numerical sequence, which are stored locally in the buffer memory of the browser used. Cookies do not become part of the PC system and cannot run programmes. They are used to ensure that our website is user-friendly. The use of cookies may be necessary for technical reasons or they may be used for other purposes (e.g. analysis/evaluation of the website usage).

a) Cookies required for technical reasons 

Some elements of our webpage require that the calling browser can be identified even when a different website is being visited. The cookies process the following data: 

  • language settings
  • items in shopping basket
  • login information

The user data collected by cookies that are required for technical reasons is not used for creating user profiles. We also use so-called “session cookies”, which store a session ID, which enable the assignment of different enquiries by your browser to a joint session. Session cookies are necessary for the use of the website. In particular, it enables us to recognise the terminal device when you return to the website. We use this cookie to recognise you when you visit the website again, if you have an account with us; otherwise, you have to register again every time you visit the website. The legal basis for this processing is Article 6(1), sentence 1 (f) GDPR. We place session cookies to facilitate a more appealing and effective use of our website. The session cookies are being deleted as soon as you log out or close the browser.

Most browsers are configured to automatically accept cookies.
 You can object to the processing of your data by means of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies which have already been saved can be deleted at any time. This can also take place automatically. If cookies for our website are disabled, it is possible that not all of the website’s functions can still be fully used.

a) Cookies not required for technical reasons 

Our website also uses cookies which enable an analysis of the user’s surfing behaviour. For this purpose, the cookies store and process, for example, the following data:

  • search terms entered
  • frequency of page views
  • use of website functions

These cookies are used to make the use of the website more efficient and appealing. The legal basis for this processing is Article 6(1), sentence 1 (f) GDPR. The cookies that are not required for technical reasons are automatically deleted after a predetermined time, which may differ depending on each cookie.

You can object to the processing of your data by means of cookies. If you do not want the use of cookies, you have the option to change the browser settings in order to block cookies in general or selectively, or to remove cookies that have already been stored. You can also arrange to receive corresponding notices prior to the cookie being placed. If you should change the browser settings regarding the use of cookies or deactivate cookies, the functional scope of this website may be limited.

Where we involve cookies from third-party providers on our website, we will notify you of this separately.

Contacting our company

When you contact our company, e.g. via email or via the contract form on the website, the personal data you have provided is processed by us in order to answer you query. 

To deal with your enquiry via the contact form on the website, it is essential that you provide your name or a pseudonym as well as a valid email address. The address and phone number are optional. When the message is sent to us, the following data is also processed:

  • IP address
  • date/time of registration

The legal basis for the processing is Article 6(1), sentence 1 (f) GDPR or Article 6(1), sentence 1 (b) GDPR, if the purpose of the contact is the formation of a contract.

Processing of the personal data from the input screen is used by us solely for the purpose of processing the contact. In the case of a contact via email, here also lies the required legitimate interest in processing the data. Other personal data processed during the dispatching process assist us in preventing misuse of the contact form and in ensuring the security of our IT system.

In each case, no data is transferred to third parties in connection with this. The data is exclusively processed for the purpose of processing the conversation. We delete the data accrued in this connection, after processing is no longer required, or we restrict the processing to the existing retention periods prescribed by law.

You have the option at any time to object to the processing of your personal data for contact requests. This applies if the processing in particular is not necessary for the performance of a contract with you, which we will explain in each case during the preceding description of the functions. In such a situation, we may not be able to continue to process the enquiry. If your objection is justified, we review the situation and either stop data processing or make adjustments thereto, or we demonstrate our compelling legitimate grounds upon which we continue to process the data.

Processing and disclosure of personal data for contractual purposes

We process your personal data if and insofar as this is required for the initiation, conclusion, implementation and/or termination of a legal transaction with our company. The legal basis for this is Article 6(1), sentence 1 (b) GDPR.

After the purposes have been achieved (e.g. contract implementation), the personal data is locked to prevent further processing, insofar as we do not have your consent (e.g. consent for the processing of the email address to send electronic advertising mail), a contractual agreement, a legal authorisation (e.g. authorisation to send direct advertising) or due to legitimate interests (e.g. storage for the enforcement of rights), are entitled to further storage and, in the relevant context, to the necessary processing.

Your personal data is passed on insofar as this is 

  • necessary for the conclusion, implementation or termination of legal transactions with our company (e.g. where the data is disclosed to a payment service provider / a shipping company for the implementation of a contract with you), (Article 6(1), sentence 1 (b) GDPR, or where
  • a subcontractor or agent exclusively used to provide the products or services requested by you requires this data (such auxiliaries are only authorised to process your data to the extent that this is necessary to provide the product or service, unless you have been expressly informed otherwise by us) or
  • an enforceable administrative order (Article 6(1), sentence 1(c) GDPR exists, or
  • an enforceable judicial order exists (Article 6(1), sentence 1(b) GDPR, or where
  • we have an obligation to that effect, according to law (Article 6(1), sentence 1(c) GDPR, or
  • the processing is necessary to protect the vital interests of the data subject or another natural person (Article 6(1), sentence 1(d) GDPR, or we are authorised or even obliged to disclosure to pursue prevailing legitimate interests (Article 6(1), sentence 1(f) GDPR.

Your personal data shall not be disclosed further to other persons, companies or bodies, unless you have effectively consented to such disclosure. The legal basis for the processing in this case is Article 6(1), sentence 1(a) GDPR.

Processing and disclosure of personal data in the online shop

If you wish to place an order or reservation in our online shop, it is necessary for the initiation and conclusion of the contract  that you provide your personal data such as your name, your address and your email address. The mandatory details required for the handling of the order and the contract are marked separately, further information is optional. We process your data for the purpose of handling the order, in the process we are passing on in particular payment data to your chosen payment service providers or our bank. The legal basis for the processing is Article 6(1), sentence 1 (b) GDPR. To prevent access to your personal data by unauthorised third parties, the order process on the website is encrypted using SSL/TLS technology.

You can voluntarily set up a customer account, where we store your data for subsequent further visits to the website. The data provided by you when setting up the customer account is processed. After successful registration, you can edit or delete any other data yourself, including your customer account. 

We delete the data accrued in this connection, after the storage is no longer required, or we restrict the processing, if there are existing retention periods prescribed by law. Due to mandatory legal commercial and tax regulations, we have a duty to retain your data on your address, payment and order for a period of ten years. Two years after the termination of the contract, we limit the scope of processing to the compliance with existing legal obligations.

Registration/password-protected area of the website

If you wish to use the password -protected area on our website, you must register with the following details:

  • email address, 
  • name
  • username
  • chosen password

It is not mandatory to provide your real name, you may use a pseudonym.  

Further, the following data is processed at the time of registration:

  • IP address
  • date/time of registration

The data will be deleted as soon as it is no longer required to achieve the purpose of their processing. This applies to the data collected during the registration process, when the registration on the website is cancelled or amended.

The following functions are available to you in the password-protected area:

  • edit your profile data, 
  • view orders/reservations, 
  • manage, amend or cancel your newspaper subscription.

Insofar as you are using the password-protected area of the website, e.g. for the processing of your profile data or view orders or reservations you have placed, we also process your personal data necessary to initiate or perform the contract, in particular address data, data regarding the method of payment. The legal basis for the processing is Article 6(1), sentence 1 (b) GDPR.The data will be deleted as soon as it is no longer required to achieve the purpose of their processing and there are no legitimate interests to oppose erasure. Due to mandatory legal commercial and tax regulations, we have a duty to retain your data on your address, payment and order for a period of ten years. Two years after the termination of the contract, we limit the scope of processing to the compliance with existing legal obligations.

Insofar as you have provided further optional data (e.g. regarding interests, details on size, age, gender, children, preferences, instructions), we process your data that are not required for the initiation or performance of the contract, as long as you use the password-protected area, and if you do not delete the data yourself beforehand. Our objective is the optimisation of the website for you as a user. The legal basis is Article 6(1), sentence 1 (f) GDPR. 

You may object to the processing of the data you have optionally provided. You can manage, change or delete your optional data in the password-protected area at any time. You are at liberty to take measures in accordance with the section “Your rights”, whereby we would request that you first contact us in case of any complaints.

Email marketing

Advertising to existing clients

We reserve the right to process the email address you have provided to us during the registration/order/reservation in accordance with the legal provision for the purpose of sending you the following contents by email, following the performance of the contract, provided that you have not already objected to such processing of your email address:

  • further interesting offers from our portfolio,
  • Events held by our company,
  • technical information,
  • sending our catalogue,
  • enquiries regarding special requests, 
  • overview of potential recreational offers, 
  • information on how to reach us by public transport.

The legal basis for this processing is Article 6(1), sentence 1 (f) GDPR. The above-mentioned processing serves to provide customer care and to improve our service features. We delete your data if you cancel the newsletter subscriptions, however, no later than two years after termination of the contract. 

Please note that you can object to the receipt of direct advertising at any time, without incurring costs other than the transmission costs according to the basic rates. To do so, click on the “unsubscribe” link in the newsletter or send your objection to us, using the contact data provided in the section “Responsible provider”.

Newsletter

You have the option to subscribe to our email newsletter on the website, which provides regular information on the following:

  • offers from our portfolio,
  • events held by our company,
  • offers (also events) by third parties, to the extent that you have given consent to this.
  • new articles/collections,
  • special offers/offers limited in time

To receive the newsletter, the following personal data is required.

  • recipient (name or pseudonym)
  • valid email address

The subscription to our email newsletter is submitted via the double opt-in procedure. Following the entry of the data marked as required, we send you an email to the email address you have provided, where we request your express confirmation of the newspaper subscription (by clicking on a confirmation link (“confirm” link)). This is to ensure that you actually wish to receive our email newsletter. If the confirmation is not provided within 24 hours, we block the information sent to us and automatically delete such information after no later than one month.

Further, the following data is processed at the time of the subscription:

  • IP address 
  • date/time of the subscription for the newsletter,
  • time of your confirmation of the “confirm” link.

We process your IP address, the time of the newspaper subscription as well as the time of your confirmation, in order to document your newspaper subscription and to prevent the misuse of your personal data. The legal basis for the processing is Article 6(1), sentence 1 (f) GDPR. We process such data until the expiry of two years after termination of the contract. Insofar as the newsletter subscription is made outside of a contract, we process this data until two years after the application process have expired. We will delete this data when the newsletter subscription ends.

After your confirmation, we process the email address and name/pseudonym of the recipient concerned for the purpose of sending our email newsletters. The legal basis for the processing is Article 6(1), sentence 1(a) GDPR. We will delete this data when you cancel the newsletter subscription.

You can withdraw your consent to process the email address to send the newsletter at any time, either via message to us (see contact details in section (“Responsible provider / representative of the provider in the European Union”) or by using the “unsubscribe” link contained in the newsletter you have received.

Please note that we evaluate your user behaviour when we send the newsletter. For the purpose of such evaluation, the emails we sent contain so-called web beacons or tracking pixels, which are one-pixel image files integrated in our website. For the evaluations, we link the data mentioned in the section “Access data” and the web beacons to your email address and an individual ID. Links contained in the newsletter also contain this ID.

With the data obtained, we create a user profile to tailor the newsletter to your individual interests. In the process, we record when you read our newsletter, which links you are clicking in these newsletters and thus establish your personal interests. We link this data with your activities on our website. The information will be processed as long as you subscribe to the newsletter. After cancellation of the newsletter, we process the data anonymously and purely for statistical reasons.

This enables us to evaluate the use and optimisation of email advertising we sent to you. The legal basis for the processing is Article 6(1), sentence 1 (f) GDPR.

You can object to this tracking at any time by clicking on the separate “unsubscribe” link provided in every newsletter, or by contacting us using the contact details provided to you in section “Responsible provider”.

You can also prevent tracking by deactivating the display of images in your email programme by default. In this case, the newsletter is not displayed to you in full and you may not be able to use all functions. If you manually allow the images to be displayed, the above-mentioned tracking will take place. 

Email marketing service “Mailingwork”

We use Mailingwork for the dispatch of newsletters. The provider is Mailingwork GmbH, Birkenweg 7, 09569 Oederan. Mailingwork is a service facilitating the organisation and analysis of the newsletter dispatch. The data submitted by you (e.g. email address) for the purpose of subscribing to the newsletter are stored on Mailingwork servers in Germany.

Our newsletters sent via Mailingwork enables us to analyse the behaviour of the newsletter recipients. Among other things, we can analyse how many recipients have opened the message containing the newsletter and how often which link was clicked in the newsletter. By means of so-called conversation tracking, we can also analyse whether an action defined beforehand (e.g. purchase of a product on our website) took place after the link in the newsletter has been clicked.

The evaluation of the information mentioned serves to recognise the reading habits of the recipients, to enable us to improve how we match and disseminate the contents of our newsletters correspondingly. The legal basis for the processing is Article 6(1), sentence 1(f) GDPR.We process such data until the expiry of two years after termination of the contract. Insofar as the newsletter subscription is made outside of a contract, we process this data until two years after the application process have expired. We will delete this data when the newsletter subscription ends. We neither have any knowledge nor influence on the duration of the storage at Mailingwork. Further information is available in the privacy policy by Mailingwork at: https://mailingwork.de/datenschutz

You can object to the processing at any time with future effect, by clicking on the “unsubscribe” link at the end of the newsletter. This simultaneously stops the processing for the receipt of the newsletter and for statistical analyses. It is not possible to object separately to the sending by Mailingwork or the statistical evaluation.

Alternatively, you can object at http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/(regarding the area of the European Union).

Payment Service Provider (PSP)

PayPal

We offer payment via PayPal on our website. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: “PayPal”).

If you select payment via PayPal, the payment details you have entered are transmitted to PayPal. The basis of the transmission of your data to PayPal is Article 6(1), sentence 1(b) GDPR (Processing for the performance of a contract). We neither have any knowledge nor influence on the duration of the storage at PayPal.

Transfer of personal data during payment by credit card

Your personal data is transferred categorically only to the extent that it is necessary to implement the contract. Insofar as required for the payment transaction, we transfer the payment data that are necessary for this purpose to the credit institution assigned to handle your payment, or if appropriate, the service provider for payment and invoicing instructed by us. 

The data is processed on the basis of Article 6(1), sentence 1(b) GDPR (Processing for the performance of a contract). The data required for processing the payment are securely transmitted via the “SSL” procedure and processed exclusively for handling the payment. We delete the data accrued in this connection, after the storage is no longer required, or we restrict the processing, if there are existing retention periods prescribed by law.

Transfer of personal data for the purpose of law enforcement/address enquiry/collection

If a legitimate interest exists in accordance with Article 6(1), sentence 1 (f) GDPR, in the case of non-payment, we reserve the right to disclose the data submitted at the time of the order / reservation to a solicitor and/or and external company (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss), for the purpose of address enquiry and/or law enforcement.

We also pass on your data, if appropriate, if this is necessary to exercise our rights as well as the rights of companies associated with us, our cooperation partners, our employees and/or the users of our website. We do not under any circumstances sell or lease your data to third parties. The transfer of this data is made on the basis of Article 6(1), sentence 1 (f) GDPR.

We delete the data accrued in this connection, after the storage is no longer required, or we restrict the processing, if there are existing retention periods prescribed by law.

You have the option at any time to object to the processing of your data. This applies if the processing in particular is not necessary for the performance of a contract with you, which we will explain in each case during the preceding description of the functions. If your objection is justified, we review the situation and either stop data processing tor make adjustments thereto, or we demonstrate our compelling legitimate grounds upon which we continue to process the data.

PayPal Plus

If you select the payment method “Debit via PayPal Plus” or “Credit card via PayPal Plus” during your reservation/order, we transfer the collected personal data to PayPal (Europe) S.àr.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal) for the processing of the payment. The legal basis for the processing is Article 6(1), sentence 1 (b) GDPR.

By means of the transferred data, PayPal creates an invoice and, if appropriate, carries out an identity check and credit check. PayPal has a legitimate interest in the transmission of the personal data of the purchaser and processes these in order to carry out identity checks and credit checks with credit agencies, Article 6(1), sentence 1 (f) GDPR.

These can be bodies named at https://www.paypal.com/de/webapps/mpp/ua/third-parties-list?locale.x=de_DEand https://www.paypal.com/de/webapps/mpp/ua/third-parties-list?locale.x=de_DE

During the credit check, mathematical-statistical procedures are used to calculate a rating with respect to the probability of payment default (so-called calculation of a score value). PayPal uses the calculated score value as a basis of its decision on providing the respective payment method. The score value is calculated by using recognised scientific methods. 

In addition to the address data, information about previous payment behaviour as well as probability values on the payment behaviour that can be expected in the future are also incorporated. We neither have any knowledge nor influence on the duration of the storage at PayPal.

You may obtain access, rectification or erasure of the data stored by PayPal at any time and object to the processing of your personal data by PayPal at any time. PayPal shall, however, continue to be authorised to process and transfer the customer data, if this is necessary for the contractual payment processing (Article 6(1), sentence 1(b) GDPR or prescribed by law, or ordered by a public authority or a court (Article 6(1), sentence 1(c) GDPR. 

You can contact PayPal via the following contact form: https://www.paypal.com/de/selfhelp/contact/email/privacy.Further information on the processing of your data by PayPal is available at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#r7.

SOFORT by Klarna

If you select the payment method “SOFORT” during your reservation/order, we transfer the data you have provided to us to Sofort GmbH (Theresienhöhe 12, 80339 München, Germany; Web: https://www.sofort.de/; hereinafter “SOFORT”) for the processing of the payment. 

“SOFORT” is a direct transfer procedure, where a transfer can be prepared as early as during the order process and carried out in real time. For this purpose, you are redirected to the website of the payment service provider SOFORT.

The legal basis for the processing is Article 6(1), sentence 1 (b) GDPR. We neither have any knowledge nor influence on the duration of the storage at SOFORT. Further information on the collection and processing of your data by “SOFORT” is available at https://www.sofort.de/datenschutz.html

Giropay

We offer payment via Giropay on our website. Provider on this payment service is Giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, Germany (hereinafter: “Giropay”).

If you select payment via Giropay, the payment details you have entered are transmitted to Giropay. The basis of the transmission of your data to Giropay is Article 6(1), sentence 1(b) GDPR (Processing for the performance of a contract). We neither have any knowledge nor influence on the duration of the storage at Giropay.

Hosting

We use external hosting services, which deal with the provision of the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. In the process, all data required for the operation and use of our website is processed.

We use external hosting services for the operation of our website. The use of external host services facilitates an efficient and safe provision of our website. The legal basis for the processing is Article 6(1), sentence 1 (f) GDPR.

The recording of data for the provision and use of the website and the processing of data via external web hosts is imperative for the operation of the website. You have a right to object to processing. If your objection is justified, we review the situation and either stop data processing or make adjustments thereto, or we demonstrate our compelling legitimate grounds upon which we continue to process the data.

Services for statistical, analytical and marketing services

We use services of third-party providers  for statistical, analytical and marketing services. This enables us to provide a user-friendly, optimised use of the website. The third-party providers use cookies to manage their services (see previous section “Cookies). Unless stated otherwise below, personal data is not processed.

Some of the third-party providers offer the option to directly object to the use of the respective service, e.g. by setting an opt-put cookie.

If you activate a corresponding opt-out cookie, the external provider can no longer process any data on your user behaviour. You can also object selectively against an individually made selection of external services. If you change your browser or the terminal device you are using, you must set the opt-out cookie again. 

You may also object to the use of cookies directly via the opt-out platform of the Federal Association of Digital Business (Bundesverband Digitale Wirtschaft e.V. - BVDW),  at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.htmlor via the deactivation page of the Network Advertising Initiative athttp://www.networkadvertising.org/choices/. Further information on user-based advertising and the opt-out options are also available at the following link: http://www.youronlinechoices.com/de/.

Below, we provide information about the services by external providers we use on our website as well as the purpose and scope of the respective processing in the individual case and about your existing options to object. 

Google Analytics

To optimally match our website with your interests, we use Google Analytics, a web analysis service provided by Google. Google Analytics uses so-called  “cookies” (see previous section “Cookies”), which are stored on your computer and enable the analysis of website use. The additionally created information on the use of this website is transmitted to a Google server in the USA and processed there. 

If the IP anonymisation on this website is activated, Google will first shorten your IP address within the Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area. Only in exceptional circumstances is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of us to analyse your usage of the website, to compile reports about website activities and to render other services connected with website usage and Internet usage.

Google does not associate the IP address transmitted by your browser in the context of Google Analytics with other data.

This website uses Google Analytics with the extension „_anonymizeIp()“. Thereby, IP addresses are further processed in their shortened form, to exclude identification of the specific user. To the extent that reference to you is made by the data collected on you, this is immediately excluded, and the personal data is deleted promptly.

We use Google Analytics to analyse and continuously improve the use of our website. By means of the statistics, we can improve our offering and provide a presentation that is more interesting for you as a user. For the exceptional cases, where personal data is transmitted to the USA, Google has agreed to comply with the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing by Google Analytics is Article 6(1), sentence 1 (f) GDPR. We neither have any knowledge nor influence on the duration of the storage at Google. The Google Analytics cookies are deleted after fourteen months.

You have the right to object. You can prevent cookies from being stored by setting your browser software appropriately; please note that, in this case,  you may not be able to take full advantage of all the functions of this website. Furthermore, you can prevent the capture by Google of data generated by the cookie related to your usage of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link http://tools.google.com/dlpage/gaoptout?hl=de

Further information on the third-party provider Google is available at: 

http://www.google.com/analytics/terms/de.html,

http://www.google.com/intl/de/analytics/learn/privacy.html,

http://www.google.de/intl/de/policies/privacy.

User-based online advertising

Google AdWords conversion

We use the offering by Google AdWords to draw attention to our attractive offers on external websites by means of advertising materials (so-called Google AdWords). We are able to establish how successful the individual advertisement measures are, in relation to the advertising campaign data. We thereby pursue the interest to show you advertising that is of interest to you, to provide a more interesting design for you and to achieve a fair calculation of advertising costs.

These advertising materials are supplied by Google via so-called “Ad Servers”. For this purpose, we use Ad server cookies, whereby certain parameters of performance measurement, such as the overlay of the advertisements, or clicks by the users can be measured. If you reach our website via a Google advertisement, Google AdWords places a cookie in your PC. These cookies usually expire after 30 days and shall not be used to identify you in person. With this cookie, as analytical values, the unique cookie ID, number of Ad impressions per placement (frequency), last impression (relevant for post view conversions) as well as opt-out information (marker that the user no longer wishes to be contacted) are usually stored.

These cookies enable Google to recognise your Internet browser. If a user has visited certain pages of the website of an AdWords client, and the cookie on his computer has not yet expired, Google and the client can see that the user has clicked on the advertisement and was redirected to this site. A different cookie is assigned to each AdWords client. Cookies can, therefore, not be traced via the websites of AdWords clients. Within the scope of the above-mentioned advertising measures, we do not process any personal data ourselves: We merely receive statistical evaluations from Google. By means of these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising measures, in particular, we are not able to identify the users by means of this information.

On the basis of the marketing tools used, your browser automatically establishes a direct connection to the Google server. We do not have any influence on the extent and the further processing of the data that are collected by Google via this tool and, therefore, notify you on the basis of the information available to us: With the integration of AdWords Conversation, Google is notified that you have called up a part of our respective website or clicked on an advertisement by us. If you are registered with one of Google’s services, Google can link the visit to your account. Even if you are not registered with Google or you are not logged in, the provider may be able to obtain and store your IP address.

The legal basis for this processing of your data is Article 6(1), sentence 1 (f) GDPR. We neither have any knowledge nor influence on the duration of the storage at Google.

You can prevent participation at this tracking procedure in various ways: 

  • by way of the corresponding setting of your browser software, the suppression of third-party cookies particular has the result that you do not receive any advertisements from third-party providers; 
  • by deactivating the cookies for conversion tracking, by setting your browser that cookies from the domain „www.googleadservices.com“ are blocked, https://www.google.de/settings/ads, whereby these settings are deleted if you delete your cookies; 
  • by deactivating the interest-based advertisements of the providers, which are part of the self-regulating campaign “About Ads”, via the link http://www.aboutads.info/choices, whereby this setting is deleted if you delete your cookies; 
  • by permanent deactivation in our browsers Firefox, Internet explorer or Google Chrome using the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to fully use the functions of this website. 

Further information on data protection at Google is available at: http://www.google.com/intl/de/policies/privacyand https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org

Google has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Facebook Custom Audiences

This website also uses the function “Website Custom Audiences” via  the so-called “Facebook Pixel”by Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support [at] support [dot] facebook [dot] com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: “Facebook”).

Consequently, interest-based advertisements (“Facebook Ads”) can be shown to users of the website when they visit the social network Facebook or other websites which use the procedure. We thereby pursue the interest to show you advertising that is of interest to you, in order to provide a more interesting design for you.

On the basis of the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We do not have any influence on the extent and the further processing of the data that are collected by Facebook via this tool and, therefore, notify you on the basis of the information available to us: With the integration of Facebook Custom Audiences, Facebook is notified that you have called up our respective website or clicked on an advertisement by us. If you are registered with one of the services provided by Facebook, Facebook can link the visit to your account. Even if you are not registered with Facebook or you are not logged in, the provider may be able to obtain and store your IP address and further identifiers.

The legal basis for this processing of your data is Article 6(1), sentence 1 (f) GDPR. In this case, we do not store any of your personal data. We neither have any knowledge nor influence on the duration of the storage at Facebook.

Logged-in users can deactivate the “Facebook Custom Audiences” function at https://www.facebook.com/settings/?tab=ads#_to exercise their right to object

You can prevent the “Facebook Custom Audiences” function in various ways and thus exercise your right to object

Ü   by way of the corresponding setting of your browser software, the suppression of third-party cookies particular has the result that you do not receive any advertisements from third-party providers;

Ü   by deactivating the interest-based advertisements of the providers, which are part of the self-regulating campaign “About Ads”, via the link http://www.aboutads.info/choices, whereby this setting is deleted if you delete your cookies.

Further information on the processing by Facebook is available at  https://www.facebook.com/about/privacy.

Facebook Analytics

For the use of Facebook Analytics, we use the so-called “tracking pixel” by Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support [at] support [dot] facebook [dot] com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: “Facebook”) to trace your user behaviour. The information gained by means of the tracking pixel cookie are used only for statistical purposes, are transmitted to us anonymously by Facebook and do not provide any information to personally identify the user. They are, however, linked to your Facebook account, stored and used for Facebook’s own advertising purposes in accordance with Facebook’s Privacy Policy, whereby it is possible that your data is also transferred to partners of Facebook. Even if you are not registered with Facebook or you are not logged in, the provider may be able to obtain and store your IP address and further identifiers.

The processing of your data in this case is based on Article 6(1)(f) GDPR. By using Facebook Analytics, we are pursuing the interest to improve the evaluation of our website improve our service offering.In this case, we do not store any of your personal data. We neither have any knowledge nor influence on the duration of the storage at Facebook. Further information on the Privacy Policy by Facebook can be found at https://de-de.facebook.com/about/privacy/.

Logged-in users can deactivate the “Facebook Analytics” function at https://www.facebook.com/settings/?tab=ads#_to exercise their right to object. 

You can prevent the “Facebook Analytics” function in various ways and thus exercise your right to object. 

  • by way of the corresponding setting of your browser software, the suppression of third-party cookies particular has the result that you do not receive any advertisements from third-party providers;
  • by deactivating the interest-based advertisements of the providers, which are part of the self-regulating campaign “About Ads”, via the link http://www.aboutads.info/choices, whereby this setting is deleted if you delete your cookies.

Social network plugins

Our website contains social network plugins. These are provided to the following providers: 

The use of plugins is indicated within our website by the above-mentioned logos or by small stylised symbols.  

We offer you the opportunity to communicate directly with the provider of the plugin via the button.  The plugin provider receives the information that you have called up the respective website of our online offering only if you activate the marked field by clicking on it. In addition, the data specified in section “Access data” are transmitted. 

According to the respective providers in Germany, Facebook and Xing anonymise the IP address immediately after collection. Therefore, by activating the plugin, your personal data is transmitted from the respective plugin provider and processed there (in case of US-American providers in the USA). As the plugin provider collects data primarily by means of cookies, we recommend that, before clicking on the greyed-out box, you delete all cookies via the security settings of your browser.

We neither have any influence on the collected data and processing, nor do we have knowledge of the full extent of the data processing, the purpose of processing, the storage periods. Likewise, we do not have any information on the deletion of the data collected by the plugin provider. 

The plugin provider stores the collected data on you as user profiles and processes these for the purposes of advertising, market research and/or appropriate design of its website. Such evaluation is carried out in particular (also not for logged-in users) for the presentation of needs-based advertisements and to inform other users of the social network of your activities on our website. 

The legal basis for the use of plugins is Article 6(1), sentence 1 (f) GDPR. We offer the opportunity to you to interact with the social networks and other users via the plugins, to enable us to improve our offering and to provide you as a user with a more interesting offering.

You have the right to object to the creation of user profiles, and you have to contact the respective plugin provider if you wish to exercise this right. You can prevent the creation of user profiles in various ways and thus exercise your right to object: 

  • by way of the corresponding setting of your browser software, the suppression of third-party cookies particular has the result that you do not receive any advertisements from third-party providers;
  • by deactivating the interest-based advertisements of the providers, which are part of the self-regulating campaign “About Ads”, via the link http://www.aboutads.info/choices, whereby this setting is deleted if you delete your cookies.

The data is transferred irrespective of whether or not you have an account with the plugin and whether or not you are logged in such account. If you are logged in with the plugin provider, your data that has been collected by us will be directly linked to your existing account with the plugin provider. If you click the activated button and, for example, link the page, the plugin provider also stores this information in your user account and forwards it also to your contacts. 

We recommend that you regularly log out of social network accounts after visits, in particular, prior to activating the button, as this will avoid a link to your profile with the plugin provider.

Copyright by Spirit Legal LLP