The privacy statement of Bergader Privatkäserei GmbH is based on the definitions that were used by the responsible European body for Directives and Regulations when issuing the General Data Protection Regulation (GDPR). Our privacy statement should be easy to read and understandable both for the general public as well as for our customers and business partners. In order to guarantee this we would like to explain the used terms in advance.

In this privacy statement we use, among others, the following terms:

• a) Personal data
  Personal data is all information that refers to an identified or identifiable natural person (hereinafter “data subject”). A natural person is seen as identifiable, who can be identified directly or indirectly, in particular by means of allocation to an identifier such as a name, to a code number, to location data, to an online identifier or to one or more special features, which are an expression of the physical, physiological, genetic, mental, financial, cultural or social identity of this natural person.
• b) Data subject
  A data subject is each identified or identifiable natural person, whose personal data is processed by the party responsible for the processing.
• c) Processing
  Processing is each procedure, or each such series of procedures, in connection with personal data carried out with or without the help of automated processes such as the collection, the entry, the organisation, the arrangement, the storage, the adjustment or change, the read-out, the query, the use, the disclosure by transmission, distribution or any other form of provision, the comparison or the linking, the restriction to, the deletion or the destruction.
• d) Restriction to the processing
  Restriction to the processing is the marking of stored personal data with the aim to restrict their future processing.
• e) Profiling
  Profiling is each type of automated processing of personal data that consists of the fact that this personal data is used in order to assess certain personal aspects, which refer to a natural person, in particular in order to analyse or foresee aspects with regard to work performance, financial position, health, personal preferences, interests, reliability, conduct, place of abode or change in location of this natural person.
• f) Pseudonymisation
  Pseudonymisation is the processing of personal data in a manner in which the personal data can no longer be allocated to a specific data subject without using additional information, insofar as this additional information is stored separately and is subject to technical and organisational measures, which guarantee that the personal data is not allocated to an identified or identifiable natural person.
• g) Responsible party or party responsible for the processing 
  A responsible party or party responsible for the processing is the natural person or legal entity, authority, institution or other body that alone or together with others decides about the purposes and means of the processing of personal data. If the purposes and means of this processing are stipulated by Union law or the law of the member states then the responsible party respectively the certain criteria for his or its appointment can be envisaged according to Union law or the law of the member states.
• h) Contract processor
  A contract processor is a natural person or legal entity, authority, institution or other body, which processes personal data by order of the responsible party.
• i) Recipient
  A recipient is a natural person or legal entity, authority, institution or other body, to which personal data is disclosed, irrespective of whether this concerns a third party or not. Authorities, which may possibly receive personal data within the scope of a certain investigation order according to Union law or the law of the member states, shall however not be deemed recipients.
• j) Third party
  A third party is a natural person or legal entity, authority, institution or other body except the data subject, the responsible party, the contract processor and the persons, who are authorised under the direct responsibility of the responsible party or the order processor to process the personal data.

•  

The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions with the character of data protection law is:

Bergader Privatkäserei GmbH
Weixlerstraße 16
83329 Waging am See
Germany

T +49 8681 404 0
E-mail: info@bergader.de
Website: www.bergader.de

The data protection officer of the controller is:

Johann Gründl
Bergader Privatkäserei GmbH
Weixlerstraße 16
83329 Waging am See

Tel.: +49 8681 404 400

E-Mail: datenschutz@bergader.de

Any person concerned can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

The websites of Bergader Privatkäserei GmbH use cookies. Cookies are text files that are filed and stored on a computer system via an internet browser.

Numerous websites and servers use cookies. Many cookies contain a so-called cookie-ID. A cookie-ID is a clear identifier of the cookie. It consist a string of characters, through which websites and servers can be allocated to the specific internet browser, in which the cookie was stored. This makes it possible to make a distinction between the visited websites and servers, the individual browser of the data subject and other internet browsers, which contain other cookies. A certain internet browser can be recognised and identified via the clear cookie-ID.

By the use of cookies Bergader Privatkäserei GmbH can make user-friendly services available to the users of this website, which would not be possible without the setting of cookies.

The information and offers on our website can be optimised in the interest of the user by means of a cookie. Cookies enable us, as mentioned already, to recognise the users of our website. The purpose of this recognition is to facilitate the use of our website for the users. The user of a website that uses cookies must, for example, not enter his access data once again with each visit to the website, because this is taken over by the website and the cookie filed on the user’s computer system. A further example is the cookie of a shopping basket in the online shop. The online shop notes the articles, which a customer has placed in the virtual shopping basket, through a cookie.

The data subject can present the setting of cookies by our website at all times by means of a corresponding setting of the used internet browser and thus permanently object to the setting of cookies. Further already set cookies can be deleted at all times via an internet browser or other software programmes. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the used internet browser, it may under certain circumstances not be possible to use all functions of our website in full.

The website of Bergader Privatkäserei GmbH enters a host of general data and information each time the website is called by a data subject or an automatic system. This general data and information is stored in the logfiles of the server. The (1) used browser types and versions, (2) the operating system used by the accessing system, (3) the website, from which an accessing system reaches our website (so-called referrer), (4) the sub-websites, which are reached on our website via an accessing system, (5) the data and the time of an access to the website, (6) an Internet Protocol address (IP address), (7) the Internet Service Provider of the accessing system and (8) other similar data and information, which serve to avoid dangers in the event of attacks on our information technological systems can be entered.

When using this general data and information Bergader Privatkäserei GmbH does not draw any conclusions regarding the data subject. This information is rather required in order to (1) correctly deliver the contents of our website, (2) to optimise the contents of our website as well as the advertising for these, (3) to guarantee the permanent functional capability of our information technological systems and the technology of our website as well as (4) in order to make the information that is necessary for the criminal prosecution available to criminal prosecution authorities in the event of a cyber-attack. This anonymously collected data and information is therefore evaluated by Bergader Privatkäserei GmbH, on the one hand, for statistical purposes and further with the aim to improve the data protection and the data security in our company in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server logfiles are stored separately from all personal data entered by a data subject.

The data subject has the possibility to register on the website of the party responsible for the processing by entering personal data. Which personal data is transmitted hereby to the party responsible for the processing, can be derived from the respective input mask that is used for the registration. The personal data entered by the data subject is exclusively collected and stored for internal use at the party responsible for the processing and for their own purposes. The party responsible for the processing can initiate the forwarding to one or more contract processors, for example a parcel service provider, which shall also exclusively use the personal data for an internal use that is to be attributed to the party responsible for the processing.

By a registration on the website of the party responsible for the processing the IP address allocated by the Internet Service Provider (ISP) to the data subject, the date as well as the time of the registration will also be stored. The storage of this data is carried out in the background that only this way can the misuse of our services be prevented, and these data make it possible, if required, to solve the committed criminal offences. The storage of this data is insofar necessary to protect the party responsible for the processing. This data is principally not forwarded to third parties if there is no statutory obligation for the forwarding or the forwarding serves the purpose of criminal prosecution.

The registration of the data subject by voluntarily entering personal data serves the party responsible for the processing to offer contents or services to the data subject, only to the nature of the matter can only be offered to registered users. Registered persons are at liberty to change the personal data entered with the registration or to have it deleted in full from the data stocks of the party responsible for the processing at all times.

The party responsible for the processing will provide information to each data subject, at all times upon request, concerning which personal data has been stored in relation to the data subject. The party responsible for the processing shall further rectify or delete personal data at the request or indication of the data subject, insofar as this is not opposed by any statutory storage obligations. A data protection officer named in this privacy statement and all employees of the party responsible for the processing shall be available as a contact to the data subject in this context.

On the website of Bergader Privatkäserei GmbH the users are given the possibility to subscribe to the newsletter of our company. What personal data is transmitted to the party responsible for the processing with the order of the newsletter, can be derived from the input mask used for this purpose.

Bergader Privatkäserei GmbH informs its customers and business partners about offers of the company at regular intervals by way of a newsletter. The newsletter of our company can principally only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter despatch. A confirmation e-mail in the Double-Opt-In-procedure will be sent to the e-mail address entered by a data subject for the first time for the newsletter despatch for legal reasons. This confirmation e-mail serves to check whether the holder of the e-mail address has authorised the receipt of the newsletter as the data subject.

With the registration for the newsletter we further store the IP address of the computer system used by the data subject at the time of the registration, as allocated by the Internet Service Provider (ISP) as well as the date and the time of the registration. The collection of this data is necessary in order to be able to track the (possible) misuse of the e-mail address of a data subject at a later time and therefore serves the purpose of the legal protection of the party responsible for the processing.

The personal data collected within the scope of a registration for the newsletter is exclusively used for sending our newsletter. Subscribers to the newsletters could further be informed by e-mail if this is necessary for the operation of the newsletter service or a registration in this respect, as could be the case in the event of changes to the newsletter offer or with the change to the technical conditions. No personal data collected within the scope of the newsletter service will be forwarded to third parties. The subscription of our newsletter can be terminated by the data subject at all times. The consent to the storage of personal data, which were provided to us by the data subject for the newsletter despatch, can be revoked at all times. For the purpose of revocation of the consent a corresponding link can be found in each newsletter. There is further the possibility to also de-register from the newsletter despatch at all times directly on the website of the party responsible for the processing or to communicate this to the party responsible for the processing in another manner.

The newsletters of Bergader Privatkäserei GmbH contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such e-mails, which are sent in the HTML format in order to enable a logfile recording and a logfile analysis. This way a statistical evaluation of the success or failure of online marketing campaigns can be carried out. Based on the embedded tracking pixel Bergader Privatkäserei GmbH can recognise whether and when an e-mail was opened by a data subject and which links in the e-mail were called by the data subject.

Such personal data that is collected through the tracking pixels contained in the newsletters, is stored and evaluated by the party responsible for the processing in order to optimise the sending of the newsletters and to adjust the contents of future newsletters even better to the interests of the data subject. This personal data is not forwarded to third parties. Data subjects are entitled at all times to revoke the declaration of consent submitted separately in this respect through the Double-Opt-In-procedure. After a revocation this personal data will be deleted by the party responsible for the processing. A de-registration from the receipt of the newsletter will automatically be interpreted by Bergader Privatkäserei GmbH as a revocation.

The website of Bergader Privatkäserei GmbH contains details owing to statutory regulations, which enable a fast establishment of a contact using electronic means to our company as well as a direct communication with us, which also comprises a general address of the so-called electronic post (e-mail address). Insofar as a data subject makes contact by e-mail or via a contact form with the party responsible for the processing, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the party responsible for the processing will be stored for purposes of processing or for contacting the data subject. This personal data will not be forwarded to third parties.

The party responsible for the processing only processes and stores personal data of the data subject for the period of time, which is necessary to achieve the storage purpose or insofar as this is was envisaged by the responsible European body for Directives and Regulations or another legislator in laws or regulations, which the party responsible for the processing is subject to.

If the storage purpose ceases to apply or if a storage deadline stipulated by the responsible European body for Directives and Regulations or any other responsible legislator expires, the personal data will be routinely blocked or deleted in compliance with the statutory regulations.

• a) Right to confirmation
  Each data subject has the right granted by the responsible European body for Directives and Regulations to request a confirmation from the party responsible for the processing whether the relevant personal data is processed. If a data subject would like to exercise this right to confirmation he can contact our data protection officer or another employee of the party responsible for the processing in this respect at all times.
   
• b) Right to information
  Each data subject affected by the processing of personal data has the right granted by the responsible European body for Directives and Regulations to receive free information about the personal data stored in relation to his person from the party responsible for the processing at all times and a copy of this information. The responsible European body for Directives and Regulations has further conceded that the data subject can receive details about the following information:
  • the processing purpose
  • the categories of personal data that is processed
  • the recipients or categories of recipients, to whom the personal data has been disclosed or will be disclosed still, in particular in case of recipients in third countries or at international organisations
  • if possible the planned duration for which the personal data is stored or, if this is not possible, the criteria for the stipulation of this duration
  • the existing of a right to rectification or deletion of the personal data relating to them or to the restriction to the processing by the responsible party or a right to file an objection against this processing
  • the existence of a right to lodge a complaint at a supervisory authority
  • if the personal data is not collected from the data subject: All available information about the origin of the data
  • the existence of an automatic decision-making including profiling pursuant to Article 22 Para.1 and 4 GDPR and – at least in these cases – significant information about the involved logic as well as the scope and the intended implications of such processing for the data subject
  The data subject has a further right to information concerning whether personal data was transmitted to a third country or to an international organisation. Insofar as this is the case the data subject is thus incidentally entitled to receive information about the suitable guarantees in connection with the transmission. If a data subject would like to exercise this right to information, he can contact our data protection officer or another employee of the party responsible for the processing in this respect at all times.
   
• c) Right to rectification 
  Each data subject affected by the processing of personal data has the right granted by the responsible European body for Directives and Regulations to request the rectification of incorrect personal data relating to him without delay. The data subject is further entitled, by taking the purposes of the processing into consideration, to request the completion of incomplete personal data – also by means of a supplementary declaration -. If a data subject would like to exercise this right to rectification, he can contact our data protection officer or another employee of the party responsible for the processing in this respect at all times.
   
• d) Right to deletion (right to be forgotten) 
  Each data subject affected by the processing of personal data has the right granted by the responsible European body for Directives and Regulations to request from the responsible party that the personal data relating to him is deleted without delay insofar as one of the following reasons applies and insofar as the processing is not necessary:
  • The personal data was collected or processed in any other manner than for those purposes, for which they are no longer necessary.
  • The data subject revokes his consent, upon which the processing is supposed pursuant to Art. 6 Para. 1 Lit. a GDPR or Art. 9 Para. 2 Lit. a GDPR, and there is a lack of any other legal basis for the processing.
  • The data subject files an objection pursuant to Art. 21 Para. 1 GDPR against the processing and there are no overriding legitimate reasons for the processing, or the data subject files an objection pursuant to Art. 21 Para. 2 GDPR against the processing.
  • The personal data was processed unlawfully.
  • The deletion of the personal data is necessary in order to fulfil a legal obligation according to Union law or the law of the member states, which the responsible party is subject to.
  • The personal data was collected with regard to offered services of the information society pursuant to Art. 8 Para. 1 GDPR.
  Insofar as one of the aforementioned reasons is applicable and a data subject would like to initiate the deletion of personal data, which is stored at Bergader Privatkäserei GmbH, he can contact our data protection officer or another employee of the party responsible for the processing in this respect at all times. The data protection officer of Bergader Privatkäserei GmbH or another employee will arrange for the deletion request to be satisfied without delay.
  If the personal data was published by Bergader Privatkäserei GmbH and if our company, as the responsible party pursuant to Art. 17 Para. 1 GDPR, is obligated to delete the personal data, then Bergader Privatkäserei GmbH will take appropriate measures, also of a technical kind, by showing consideration for the available technology and the implementation costs, in order to inform other parties responsible for the data processing, which process the published personal data, that the data subject has requested from these other parties responsible for the data processing the deletion of all links to this personal data or of copies or replications of these personal data, insofar as the processing is not necessary. The data protection officer of Bergader Privatkäserei GmbH or another employee will arrange for that which is necessary in an individual case.

• e) Right to restriction to the processing
  Each data subject affected by the processing of personal data has the right granted by the responsible European body for Directives and Regulations to request from the responsible party the restriction to the processing if one of the following prerequisites exists:
  • The accuracy of the personal data is disputed by the data subject, for a duration, which enables the responsible party to check the accuracy of the personal data.
  • The processing is unlawful, the data subject rejects the deletion of the personal data and instead requests the restriction to the use of the personal data.
  • The responsible party no longer requires the personal data for the purposes of the processing, the data subject requires these however in order to assert the exercising of or to defend against legal entitlements.
  • The data subject has filed an objection against the processing pursuant to Art. 21 Para. 1 GDPR and it has not been determined yet whether the legitimate reasons of the responsible party outweigh those of the data subject.
  If one of the aforementioned prerequisites exists and a data subject would like to request the restriction to personal data, which is stored at Bergader Privatkäserei GmbH, he can contact our data protection officer or another employee of the party responsible for the processing in this respect at all times. The data protection officer of Bergader Privatkäserei GmbH or another employee will arrange for the restriction to the processing.
   
• f) Right to data transferability
  Each data subject affected by the processing of personal data has the right granted by the responsible European body for Directives and Regulations, to receive the personal data relating to him, which was made available to a responsible party by the data subject, in a structured, common and machine-readable format. He is additionally entitled to transmit this data to another responsible party without being impeded by the responsible party, to which the personal data was made available insofar as the processing is based on the consent pursuant to Art. 6 Para. 1 Lit a GDPR or Art. 9 Para. 2 Lit a GDPR or on a contract pursuant to Art. 6 Para. 1 Lit b GDPR and the processing is carried out by using automated processes insofar as the processing is not necessary for performing a task that is in the interest of the public or in the exercising of public authority, which was assigned to the responsible party.
  The data subject is further entitled when exercising his right to data transferability pursuant to Art. 20 Para. 1 GDPR, to expect that the personal data is transmitted directly by a responsible party to another responsible party, if this is technically feasible and if the rights and freedom of other persons are not impaired hereby.
  In order to assert the right to data transferability the data subject can contact the data protection officer appointed by Bergader Privatkäserei GmbH or another employee at all times.
   
• g) Right to objection 
  Each data subject affected by the processing of personal data has the right granted by the responsible European body for Directives and Regulations, for reasons, which arise from his special situation, to file an objection at all times against the processing of personal data relating to him that is carried out owing to Art. 6 Para. 1 Lit e or f GDPR. This shall also apply to a profiling supported on these provisions.
  Bergader Privatkäserei GmbH will no longer process personal data in the event of an objection unless we can prove essential reasons for the processing that are worthy of protection that outweigh the interests, rights and freedom of the data subject or the processing serves to assert, exercise or defend legal claims.
  If Bergader Privatkäserei GmbH processes personal data in order to conduct direct advertising, then the data subject is entitled to file an objection at all times against the processing of the personal data for the purpose of such advertising. This shall also apply to the profiling insofar as it is associated with such direct advertising. If the data subject files an objection towards Bergader Privatkäserei GmbH against the processing for purposes of direct advertising then Bergader Privatkäserei GmbH will no longer process the personal data for these purposes.
  The data subject moreover has the right, for reasons, which arise from his special situation, to file an objection against the processing of personal data relating to him, which is carried out at Bergader Privatkäserei GmbH for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, unless such processing is necessary to fulfil a task that is in the public interest.
  In order to exercise the right to an objection the data subject can contact the data protection officer of Bergader Privatkäserei GmbH or another employee directly. The data subject is at further liberty to exercise his right to file an objection in connection with the use of services of the information society, irrespective of Directive 2002/58/EC, by means of automated processes, with which technical specifications are used.
   
• h) Automatic decisions in an individual case including profiling
  Each data subject affected by the processing of personal data has the right granted by the responsible European body for Directives and Regulations, not to be subjected to a decision exclusively based on automated processing – including profiling -, that has a legal effect towards him or that substantially impairs him in a similar manner, insofar as the decision (1) is not necessary for the conclusion or the fulfilment of a contract between the data subject and the responsible party, or (2) is admissible owing to legal regulations of the Union or of the member states, which the responsible is subject to, and these legal regulations contain appropriate measures for safeguarding the rights and freedom as well as the legitimate interests of the data subject or (3) is carried out with the explicit consent of the data subject.
  If the decision (1) for the conclusion or the fulfilment of a contract between the data subject and the responsible party is necessary or (2) if it is carried out with the explicit consent of the data subject, Bergader Privatkäserei GmbH will take appropriate measures in order to safeguard the rights and freedom as well as the legitimate interests of the data subject, which shall at least include the right to achieve the intervention of a person on the part of the responsible party, to presentation of their own point of view and to contest the decision.
  If the data subject would like to assert rights with regard to automatic decisions, he can contact our data protection officer or another employee of the party responsible for the processing in this respect at all times.
   
• i) Right to revocation of a consent under data protection law
  Each data subject affected by the processing of personal data has the right granted by the responsible European body for Directives and Regulations to revoke consent to the processing of personal data at all times.
  If the data subject would like to assert his right of revocation of consent he can contact our data protection officer or another employee of the party responsible for the processing in this respect at all times.

The party responsible for the processing collects and processes the personal data of applicants for the purpose of processing the application procedure. The processing can also be carried out by electronic means. This is in particular the case if an applicant transmits corresponding application documents by using electronic means, for example by e-mail or via a web form on the website, to the party responsible for the processing. If the party responsible for the processing concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship by complying with the statutory regulations. If no employment contract is concluded with the applicant by the party responsible for the processing then the application documents will be automatically deleted two months after announcement of the rejection decision, insofar as a deletion is not opposed by any other legitimate interests of the party responsible for the processing. Another legitimate interest within this meaning is, for example, an obligation to provide proof in proceedings according to the German General Equality Act (AGG).

The party responsible for the processing has integrated components of the Facebook company on this website. Facebook is a social network.

A social network is a social meeting point operated on the internet, an online community, which as a rule enables the users to communicate with one another and to interact in the virtual space. A social network can serve as a platform to exchange opinions and experiences or enables the internet community to make personal or company-related information available. Facebook enables the users of the social network, among others, to create private profiles, to upload photos and a network through friendship requests.

The operator company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The responsible party for the processing of personal data is, if a data subject lives outside of the USA or Canada, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

By each call of one of the individual pages of this website, which is operated by the party responsible for the processing and on which a Facebook components (Facebook-Plug-In) was integrated, the internet browser on the information technology system of the data subject is automatically induced by the respective Facebook component to download a presentation of the corresponding Facebook components from Facebook. A full overview of all Facebook plug-ins can be called under developers.facebook.com/docs/plugins/. Within the scope of this technical process Facebook is informed which specific sub-site of our website is visited by the data subject.

If the data subject is logged into Facebook at the same time, Facebook will recognise each time our website is called by the data subject and during the entire duration of the respective visit to our website, which specific sub-site of our website the data subject visits. This information is collected by the Facebook component and allocated by Facebook to the respective Facebook account of the data subject. If the data subject presses one of the Facebook buttons integrated on our website, for example the “like it” button, or if the data subject makes a comment Facebook will allocate this information to the personal Facebook user account of the data subject and store this personal data.

Facebook always receives information through the Facebook component that the data subject has visited our website if the data subject is logged into Facebook at the same time as when our website is called; this will take place regardless of whether the data subject clicks the Facebook component or not. If the data subject does not want such information to be transmitted to Facebook, he can prevent the transmission by the fact that he logs out of his Facebook account before visiting our website.

The data policy published by Facebook, which can be found under de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It is further explained there which setting possibilities Facebook offers for the protection of the privacy of the data subject. Moreover, various applications are available, which make it possible to suppress a data transmission to Facebook, for example the Facebook blocker of the provider Webgraph that can be procured under webgraph.com/resources/facebookblocker/. Such applications can be used by the data subject in order to suppress a data transmission to Facebook.

The party responsible for the processing has integrated the component Google Analytics (with the anonymisation function) on this website. Google Analytics is a web analysis service. Web analysis is the collection and evaluation of data regarding the conduct of visitors of websites. A web analysis service enters, among others, data concerning from which website a data subject came to another website (so-called referrer), which sub-sites of the website were accessed or how often and for which dwell time a sub-side was looked at. A web analyses is primarily used for the optimisation of a website and for the cost-benefit-analysis of internet advertising.

The operator company of the Google-Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The party responsible for the processing uses the supplement "_gat._anonymizeIp" for the web analysis via Google Analytics. By means of this supplement the IP address of the internet connection of the data subject is abbreviated and anonymised by Google and if the access to our websites is carried out from a member state of the European Union or from another contracting state of the Treaty on the European Economic Area.

The purpose of the Google-Analytics component is the analysis of the visitor flows on our website. Google uses the acquired data and information among others to evaluate the use of our website in order to compile online reports for us, which demonstrate the activities on our websites, and in order to further to provide services associated with the use of our website.

Google Analytics uses a cookie on the information technology system of the data subject. What cookies are was explained above previously. By setting the cookie Google is able to conduct an analysis of the use of our website. By each visit of one of the individual pages of this website, which is operated by the party responsible for the processing and on which a Google-Analytics components was integrated, the internet browser on the information technology system of the data subject is automatically induced by the respective Google-Analytics component to transmit data to Google for the purpose of the online analysis. Within the scope of this technical process Google receives knowledge of personal data, such as the IP address of the data subject, which among others serves Google to track the origin of the visitors and clicks and to consequently enable commission settlements.

By means of the cookie personal information, for example the access time, the location, from which the access came and the frequency of the visits to our website by the data subject, are stored. With each visit to our websites these personal data, including the IP address of the internet connection used by the data subject, are transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google does not under any circumstances forward these personal data collected via the technical process to third parties.

The data subject can prevent the setting of cookies by our website, as presented above already, at all times by means of a corresponding setting of the used internet browser and thus permanently object to the setting of cookies. Such a setting of the used internet browser would also prevent Google setting a cookie on the information technology system of the data subject. Moreover, a cookie already set by Google Analytics can be deleted at all times via the internet browser or other software programmes.

A further possibility exists for the data subject to object to an entry of the data generated by Google Analytics that refer to a use of this website as well as the processing of this data by Google and to prevent such. For this purpose the data subject must download and install a browser add-on under the link tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information relating to the visits of websites may be transmitted to Google Analytics. The installation of the browser-add-on will be assessed as an objection by Google. If the information technology system of the data subject is deleted, formatted or newly installed at a later time, the browser-add-on must be newly installed by the data subject in order to deactivate Google Analytics. If the browser-add-on is deinstalled or deactivated by the data subject or another person, who is to be attributed to his sphere of control, there is the possibility of the new installation or the renewed activation of the browser-add-on.

Further information and the applicable data protection provisions of Google can be called under www.google.de/intl/de/policies/privacy/ and under www.google.com/analytics/terms/de.html. Google Analytics is explained more precisely under this link www.google.com/intl/de_de/analytics/.

This website uses the Conversion-Tracking of Adform. The cookie for Conversion-Tracking is set if a user has contact with an advertisement placed by Adform. These cookies do not contain any information, with which users can be personally identified. Users, who would not like to take part in the tracking, can deactivate the cookie of Adform via their internet browser. You will find further information relating to the data protection provisions of Adform here.

This website uses Retargeting technology of Adform and Turn. This makes it possible on websites of our partners to specifically address those internet users with advertising, who have already shown an interest in our website and our products. The fading in of the advertising media is carried out with the Retargeting due to a cookie-based analysis of the previous user behaviour. No personal data is stored hereby and the use of the Retargeting technology is carried out by complying with the applicable statutory data protection provisions.

If you do not want interest-related advertising to be displayed to you, you can deactivate this function here.

The party responsible for the processing has integrated Google AdWords on this website. Google AdWords is a service for internet advertising, which permits advertisers to place both advertisements in the search engine results of Google as well as in the Google advertising network. Google AdWords enables an advertiser to stipulate certain key words in advance, by means of which an advertisement is exclusively displayed in the search engine results of Google if the user calls a search result relevant to the key word with the search engine. In the Google advertising network the advertisements are distributed by means of an automatic algorithm and by paying attention to the previously stipulated key words on websites that are relevant to the topic.

The operator company of the services of Google AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is the advertising of our website by fading in advertising relevant to the interests on the websites of third party companies and in the search engine results of the Google search engine and a fading in of third party advertising on our website.

If a data subject reaches out website via a Google advertisement, a so-called conversion cookie will be filed on the information technology system of the data subject by Google. What cookies are was explained above already. A conversion cookie will cease to be valid after thirty days and does not serve to identify the data subject. Via the conversion cookie it is tracked, insofar as the cookie has not expired yet, whether certain sub-sites, for example the shopping basket of an online shop system, were called on our website. By the conversion cookie both we as well as Google can track whether a data subject, who reached our website via an AdWords advertisement, generated revenue, thus purchased goods or interrupted this.

The data and information collected by the use of the conversion cookie is used by Google in order to create visitor statistics for our website. These visitor statistics are used by us, on the other hand, in order to determine the total number of users, who were conveyed to us through AdWords advertisements, thus in order to determine the success or failure or the respective AdWords advertisement and in order to optimise our AdWords advertisements for the future. Neither our company, nor other advertising customers of Google-AdWords receive information from Google, by means of which the data subject could be identified.

By means of the conversion cookie personal information, for example the websites visited by the data subject, can be stored. With each visit to our website accordingly personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google will, under certain circumstances, forward this personal data collected via the technical process to third parties.

The data subject can prevent the setting of cookies by our website, as presented above already, at all times by means of a corresponding setting of the used internet browser and thus permanently object to the setting of cookies. Such a setting of the used internet browser would also prevent that Google sets a conversion cookie on the information technology system of the data subject. Moreover, a cookie already set by Google AdWords can be deleted at all times via the internet browser or other software programmes.

There is the further possibility for the data subject to object to the interest-related advertising by Google. For this purpose the data subject must call the link www.google.de/settings/ads from each of the internet browsers used by him and carry out the requested settings there.

Further information and the applicable data protection provisions of Google can be called under www.google.de/intl/de/policies/privacy/.

The party responsible for the processing has integrated components of YouTube on this website. YouTube is an internet video portal that enables video publishers the free entry of video clips and other users free viewing, assessment and commenting of these videos. YouTube permits the publication of all types of videos, which is why both complete film and television programmes, however also music videos, trailers or videos made by users themselves can be called via the internet portal.

The operator company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time one of the individual pages of this website is called, which is operated by the party responsible for the processing and on which a YouTube component (YouTube-Video) was integrated, the internet browser on the information technology system of the data subject will automatically be induced, through the respective YouTube component, to download a presentation of the corresponding YouTube component from YouTube. Further information relating to YouTube can be called under www.youtube.com/yt/about/de/. Within the scope of this technical process YouTube and Google will be informed which specific sub-site of our website is visited by the data subject.

Insofar as the data subject is logged into YouTube at the same time, YouTube will recognise when a sub-site is visited that contains a YouTube-video, which specific sub-site of our website is visited by the data subject. This information is collected by YouTube and Google and allocated to the respective YouTube account of the data subject.

YouTube and Google will always receive information through the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as when our website is visited; this takes place regardless of whether the data subject clicks a YouTube video or not. If such a transmission of this information to YouTube and Google is not wanted by the data subject, he can prevent the transmission by logging out of his YouTube account before calling our website.

The data protection provisions published by YouTube, which can be called under www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

Art. 6 I lit. a GDPR serves our company as a legal basis for processing activities, with which we obtain a consent for a certain processing purpose. If the processing of personal data is necessary in order to fulfil a contract, of which the data subject is a contractual party, as is for example the case with processing activities that are necessary for the delivery of goods or the provision of any other service or counter-delivery, then the processing is based on Art. 6 I lit. b GDPR. The same shall apply to those processing activities which are necessary in order to carry out pre-contractual measures, for example in cases of enquiries for our products or services. If our company is subject to a legal obligation, through which a processing of personal data is necessary, such as for example in order to fulfil tax obligations, then the processing is based on Art. 6 I lit. c GDPR. In rare cases the processing of personal data could become necessary in order to protect vital interests of the data subject or another natural person. This would, for example, be the case if a visitor were to be injured in our company and his name, his age, his health insurance fund data or other vital information has to be subsequently forwarded to a doctor, a hospital or other third parties. Then the processing would be based on Art. 6 I lit. d GDPR. In the end, processing activities could be based on Art. 6 I lit. f GDPR. Processing activities are based on this legal basis, which are not covered by any of the aforementioned legal bases if the processing is necessary in order to safeguard a legitimate interest of our company or a third party, if the interests, basic rights and basic freedom of the person concerned do not outweigh. Such processing activities are permitted for us in particular, because they were especially mentioned by the European legislator. It was insofar of the opinion that a legitimate interest could be assumed if the data subject is a customer of the responsible party (Recital 47 Sentence 2 GDPR). 

If the processing of personal data is based on Article 6 I lit. f GDPR our legitimate interest is the execution of our business activity for the benefit and welfare of all of our employees and our shareholders.

The criterion for the duration of the storage of personal data is the respective statutory storage deadline. After the expiry of the deadline the corresponding data will be routinely deleted, if they are no longer required to fulfil the contract or to initiate a contract.

We inform you that the provision of personal data is partly stipulated by law (e.g. tax regulations) or can also be derived from contractual regulations (e.g. details relating to the contractual partner). It may be necessary for the conclusion of a contract that a data subject makes personal data available to us, which subsequently have to be processed by us. The data subject is, for example, obliged to make personal data available to us if our company concludes a contract with him. A failure to provide the personal data would result in the fact that the contract could not be concluded with the person concerned. Before a provision of personal data by the person concerned the person concerned must contact our data protection officer. Our data protection officer will inform the person concerned relating to individual cases whether the provision of the personal data is stipulated by law or as per contract or is necessary for the conclusion of the contract, whether an obligation exists to make the personal data available, and which consequences the failure to provide the personal data would have.

As a company that is aware of its responsibilities we waive an automatic decision-making or a profiling.