Data Privacy

 

Data Privacy

Datenschutzerklärung
1. Data Protection at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy below.

Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section "Information on the Responsible Entity" in this privacy policy.

How do we collect your data?
Your data is collected when you provide it to us. This can be, for example, data that you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is mainly technical data (e.g., internet browser, operating system, or time of page access). The collection of this data takes place automatically as soon as you access this website.

What do we use your data for?
Some of the data is collected to ensure the website is provided error-free. Other data can be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right at any time to obtain free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.

For this and other questions regarding data protection, you can contact us at any time.

Analysis Tools and Tools from Third Parties
When visiting this website, your surfing behavior can be statistically evaluated. This is done mainly with so-called analysis programs.
Detailed information on these analysis programs can be found in the following privacy policy.

2. Hosting and Content Delivery Networks (CDN)
External Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the servers of the host. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will process your data only to the extent necessary to fulfill its performance obligations and follow our instructions regarding this data.

We use the following host:
1&1 IONOS SE
Elgendorfer Str. 57
56410 Montabaur

Google Cloud CDN
We use the Content Delivery Network Google Cloud CDN. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google offers a globally distributed content delivery network. Technically, the information transfer between your browser and our website is routed through Google’s network. This allows us to improve the global accessibility and performance of our website.

The use of Google Cloud CDN is based on our legitimate interest in a fault-free and secure provision of our website (Art. 6 para. 1 lit. f GDPR).

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://cloud.google.com/terms/eu-model-contract-clause. Further information on Google Cloud CDN can be found here: https://cloud.google.com/cdn/docs/overview?hl=en.

3. General Notes and Mandatory Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission on the Internet (e.g., when communicating by e-mail) can have security gaps. Complete protection of data from access by third parties is not possible.

Note on the Responsible Entity
The responsible entity for data processing on this website is:
Brötje Schaumtechnik GmbH & Co. KG Am Eichenwall 10
26180 Rastede
Phone: + 49 4402 92 89 0
Email: info@broetje-schaumtechnik.de

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, e-mail addresses, etc.).

Storage Duration
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate deletion request or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, deletion will occur after these reasons cease to apply.

Data Protection Officer
We have appointed a data protection officer for our company:
Thorsten Brendel
ViCoTec IT-Sicherheit & Datenschutz GmbH & Co. KG
August-Wilhelm-Kühnholz-Str. 5
26135 Oldenburg
Phone: +49 441 - 2057 222 0
Email: info@vicotec.de

Note on Data Transfer to the USA and Other Third Countries
We use tools from companies based in the USA or other countries outside the EU that are not considered safe in terms of data protection law. If these tools are active, your personal data may be transferred to and processed in these third countries. We point out that these countries may not guarantee a level of data protection comparable to that in the EU. For example, US companies are required to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You may revoke consent that you have already given at any time. The legality of the data processing carried out up to the point of revocation remains unaffected.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING.
IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedies.

Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, either yourself or to a third party, in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption.
You can recognize an encrypted connection by the browser address bar changing from “http://” to “https://” and by the lock icon in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Right to Information, Erasure and Rectification
Within the framework of applicable legal provisions, you have the right at any time to receive free information about your stored personal data, its origin and recipients, the purpose of the data processing, and, where applicable, a right to rectification or erasure of such data. You may contact us at any time with questions on this or other topics related to personal data.

Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time to request this. The right to restriction applies in the following cases:
  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of processing of your personal data.
  • If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
  • If we no longer need your personal data but you need it to exercise, defend or establish legal claims, you have the right to request restriction of the processing instead of deletion.
  • If you have objected under Art. 21(1) GDPR, a balance must be struck between your interests and ours. Until it has been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.
If you have restricted the processing of your personal data, such data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

4. Data Collection on This Website
Cookies
Our website uses so-called "cookies." Cookies are small text files that do not harm your device. They may be stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them or your web browser automatically deletes them.

Some cookies may also be stored on your device by third-party companies when you visit our website (third-party cookies). These enable us or you to use certain services of the third-party company (e.g., cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary since certain website functions would not work without them (e.g., shopping cart function or displaying videos). Other cookies are used to evaluate user behavior or display advertising.

Cookies that are necessary to carry out the electronic communication process (necessary cookies), to provide certain functions you desire (functional cookies, e.g., for the shopping cart function), or to optimize the website (e.g., cookies to measure web audience) are stored based on Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR); consent can be revoked at any time.

You can set your browser to notify you when cookies are set and only allow cookies in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within this privacy policy and, if necessary, request your consent.

Consent with Usercentrics
This website uses the consent technology of Usercentrics to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in a data protection-compliant manner. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, Website: https://usercentrics.com/en/ (hereinafter referred to as “Usercentrics”).
When you enter our website, the following personal data is transmitted to Usercentrics:
  • Ihre Einwilligung(en) bzw. der Widerruf Ihrer Einwilligung(en)
  • Ihre IP-Adresse
  • Informationen über Ihren Browser
  • Informationen über Ihr Endgerät
  • Zeitpunkt Ihres Besuchs auf der Website
Des Weiteren speichert Usercentrics ein Cookie in Ihrem Browser, um Ihnen die erteilten Einwilligungen bzw. deren Widerruf zuordnen zu können. Die so erfassten Daten werden gespeichert, bis Sie uns zur Löschung auffordern, das Usercentrics- Cookie selbst löschen oder der Zweck für die Datenspeicherung entfällt. Zwingende gesetzliche Aufbewahrungspflichten bleiben unberührt.

Der Einsatz von Usercentrics erfolgt, um die gesetzlich vorgeschriebenen Einwilligungen für den Einsatz bestimmter Technologien einzuholen. Rechtsgrundlage hierfür ist Art. 6 Abs. 1 lit. c DSGVO.

Server-Log-Dateien
Der Provider der Seiten erhebt und speichert automatisch Informationen in so genannten Server-Log-Dateien, die Ihr Browser automatisch an uns übermittelt. Dies sind:
  • Your consents or revocation of consents
  • Your IP address
  • Referrer URL
  • Information about your browser
  • Information about your device
  • Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser to assign the consents granted or their revocation. The collected data is stored until you request deletion, delete the Usercentrics cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.

The use of Usercentrics is based on the legal obligation to obtain the legally required consents for the use of certain technologies (Art. 6 para. 1 lit. c GDPR).
This data is not merged with other data sources.

Data is collected based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – server log files must be recorded for this purpose.

Contact Form
When you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide, are stored for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

Processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the performance of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if requested.

The data you enter in the contact form remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your inquiry has been fully processed). Mandatory legal provisions – especially retention periods – remain unaffected.

DudaMobile
Our website uses services of the website builder Duda, provided by Duda Inc., 577 College Ave, Palo Alto, CA 94306, USA, for creating and managing web content. Duda offers a cloud-based platform used to host and operate our website.

Legal Basis:
Data processing is based on Art. 6(1)(f) GDPR (legitimate interest), as we have an interest in reliable provision and presentation of our website. If personal data is collected via a contact form, the basis is Art. 6(1)(b) GDPR (contract fulfillment) or Art. 6(1)(a) GDPR (consent).

Data Transfer to the USA:
Duda may process personal data on servers in the USA. A data processing agreement (DPA) is in place with Duda. Transfers are based on the EU Commission’s standard contractual clauses to ensure an adequate level of data protection.
Collected Data:
Depending on use, Duda may process:
•    IP address
•    Metadata and communication data
•    Website access and usage data
•    Form data (e.g. name, email address)

Storage Duration and Deletion:
Personal data is stored only as long as necessary for the processing purpose. Data is deleted regularly when no longer needed unless statutory retention obligations apply. Data collected via contact forms is deleted no later than 6 months after final processing unless further storage is required to fulfill a contract or legal obligations.
For more information, see: https://www.duda.co/legal/privacy

1&1 IONOS Website Editor
This website uses the website editor and hosting services of 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.
Hosting and Website Provision:
When visiting our site, 1&1 IONOS automatically collects various data and stores it in so-called log files. This includes:

•    Visitor’s IP address
•    Date and time of access
•    Accessed pages
•    Browser type and version
•    Operating system used
•    Referrer URL (previously visited page)

This data is used solely for technical provision, stability, and security and does not allow direct identification of individuals without additional information.

IONOS WebAnalytics:
IONOS uses the privacy-compliant analysis tool “IONOS WebAnalytics.” Data is collected anonymously without cookies and processed server-side, so individual users cannot be identified.

Legal Basis:
Processing is based on Art. 6(1)(f) GDPR, grounded in our legitimate interest in secure and efficient website provision.

Storage Duration and Deletion:
Log file data is generally stored for no more than 8 weeks unless longer retention is required for security investigations. Anonymized data for web analytics contains no personal data and is therefore not subject to retention limitations.
Details: https://www.ionos.de/terms-gtc/datenschutzerklaerung/


5. Plugins and Tools
Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

To do this, the browser you use must connect to Google's servers. This gives Google knowledge that this website was accessed via your IP address. The use of Google Web Fonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent was requested (e.g., consent to store cookies), the processing is based exclusively on Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

If your browser does not support web fonts, a standard font will be used by your computer.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=en.

Gstatic (Google Static)
This site uses the service Google Static. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Gstatic.com is a domain used by Google to deliver static content (images, CSS, JavaScript). The purpose is to improve network speed for users and reduce bandwidth usage to make browsing more efficient. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent was requested, processing is based exclusively on Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
More information on how user data is handled can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en.
OpenStreetMap
We use OpenStreetMap (OSM) provided by the OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

When you visit a website with an embedded OpenStreetMap, your IP address and other behavioral data may be transmitted to OSMF. Cookies or similar tracking technologies may be used. Your location may also be recorded if permitted on your device (e.g., mobile). We have no control over this data transfer.

Details: https://wiki.osmfoundation.org/wiki/Privacy_Policy
Use is based on our legitimate interest in a visually appealing online presence and ease of finding locations (Art. 6(1)(f) GDPR). If consent is requested (e.g., for cookies), processing is based solely on Art. 6(1)(a) GDPR.

Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA checks whether data entry (e.g., in a contact form) is done by a human or an automated program. It analyzes visitor behavior (e.g., IP, time on site, mouse movements) automatically when the site is accessed and transmits the data to Google. The process runs entirely in the background.

Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in protecting our services from abuse and spam. If consent is requested, the processing is based on Art. 6(1)(a) GDPR.

More info:
•    https://policies.google.com/privacy?hl=en
•    https://policies.google.com/terms?hl=en

Amazon CloudFront CDN
We use Amazon CloudFront CDN, provided by Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg.
CloudFront is a global content delivery network (CDN) that facilitates the transfer of information between your browser and our website, improving speed and accessibility worldwide.
Based on our legitimate interest in secure, stable website provision (Art. 6(1)(f) GDPR).
Data transfers to the USA are governed by the EU standard contractual clauses.
Details: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/
Privacy Policy: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf