1. Data protection at a glance
General notices
The following notices provide a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. You will find detailed information about data protection in our privacy statement provided under this text.
Data collection on this website
Who is responsible for the data collected on this website?
The website operator processes data on this website. You can find their contact details in the section ‘Information on the data controller’ in this privacy statement.
How do we collect your data?
We collect data that you communicate to us. This may be data that you fill in a contact form, for example.
Other data are collected automatically or after you have given consent by our IT systems when you visit our website. This is mainly technical data (e.g. internet browser, operating system or time of page visit). This data are collected automatically as soon as you enter this website.
What do we use your data for?
We collect some of your data to ensure that we can provide the website without any errors. Other data may be used to analyse the way you use the website.
What are your rights concerning your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of these data. If you have given your consent to data processing, you can revoke this consent for the future at any time. Furthermore, you have the right to demand that we restrict the processing of your personal data under certain circumstances. You also have the right of appeal to the competent supervisory authority.
You can contact us at any time with this and other questions concerning data protection.
Analysis tools and third-party provider tools
Your surfing behaviour on our website can be analysed statistically. This is done primarily with so-called analytics programs.
You will find detailed information on these analytics programs in the following privacy statement.
2. Hosting
ALL.INKL.com
We host our website via ALL.INKL.com, Hauptstraße 68 | D-02742 Friedersdorf. Details can be found in the ALL.INKL.com privacy policy: https://all-inkl.com/info/datenschutzinformationen/
Commissioned data processing
We have concluded a commissioned data processing agreement (AVV) with the above provider. This is an agreement required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with GDPR.
3. General and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data with confidentiality in compliance with the legal regulations and this privacy statement.
When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This data privacy policy explains which data we collect and what we use them for. It also explains how and for what purpose this is done.
We would like to emphasise that data transmission over the internet (e.g. communication by email) may have security gaps. It is not possible to guarantee absolute protection of data against access by third parties.
Note on the data controller
The data controller for data processing on this website is:
Ministry of Economic Affairs, Industry, Climate Action and Energy of the State of North Rhine-Westphalia
‘Fundamental issues relating to economic policy and the capital and financial markets, economic analyses’ division (III.2)
Berger Allee 25
40213 Düsseldorf
Germany
Telephone +49 (0)211 617720
The data controller is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Storage period
Unless a more specific storage period has been specified within this privacy statement, your personal data will remain with us until the purpose for which it was collected ceases to apply. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons have ceased to exist.
General information on the legal basis for data processing on this website
When you visit our website, personal data are collected. This is required inherently for technical reasons to ensure that you can use all of our website’s functionalities and to ensure that our website is secure (legal basis is Art. 6(1) sentence 1 e) GDPR).
If you have consented to data processing, we process your personal data based on Art. 6(1) a) GDPR. In the event of express consent to transferring personal data to third countries, data processing also takes place based on Art.49 (1) a) GDPR. If you have consented to cookie storage or to access to information in your terminal device (e.g. via device fingerprinting), the data processing is also carried out on the basis of section 25 (1) TTDSG. The consent can be revoked at any time. If your data are required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1) b) GDPR. Furthermore, we process your data on the basis of Art. 6(1) c) GDPR if this is necessary for the fulfilment of a legal obligation. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy statement.
Data protection officer
You can contact the data protection offer of the Ministry of Economic Affairs, Industry, Climate Action and Energy of the State of North Rhine-Westphalia by email at datenschutzbeauftragter@mwike.nrw.de or by using the address:
Ministry of Economic Affairs, Industry, Climate Action and Energy of the State of North Rhine-Westphalia
Data protection officer
Berger Allee 25
40213 Düsseldorf
Germany
Telephone +49 (0)211 617720
Notice on data transfer to the USA and other third countries
Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. When these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in these countries. For instance, US companies are obliged to hand over personal data to security agencies without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US agencies (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You may revoke any consent you have already given at any time. The legality of the data processing up to the revocation remains unaffected by the revocation.
Right to object to data collection in special cases (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6(1) e) GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy statement. If you file an objection, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purposes of asserting, exercising or defending legal rights/claims (objection pursuant to Art. 21(1) GDPR).
Right of appeal to the competent supervisory authority
You have the right to make a complaint to the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia as the responsible supervisory body regarding our processing of your personal data (Article 77 GDPR in conjunction with section 29 DSG NRW). You can reach the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia at:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
(State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia)
PO Box 20 04 44
40102 Düsseldorf
Germany
Tel.: +49 (0)211 384240
Fax: +49 (0)211 3842 410
Email: poststelle@ldi.nrw.de
Homepage: www.ldi.nrw.de
Right to data portability
You have the right to have data, which we process automatically based on your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another data controller, this will only take place if it is technically feasible.
Access, erasure and rectification
Within the scope of applicable statutory provisions, you have the right to free information about your stored personal data, their source and recipient, and the purpose of data processing and, if necessary, a right to rectification or erasure of this data. You can contact us at any time with this and other questions concerning personal data.
Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data. You can contact us at any time for this purpose. The right to restrict processing exists in the following cases:
- If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to demand that we restrict the processing of your personal data.
- If the processing of your personal data has taken/is taking place unlawfully, you can demand the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need them for the exercise, defence or assertion of legal claims, you have the right to demand the restriction of the processing of your personal data instead of deletion.
- If you have filed an objection in accordance with Art. 21(1) GDPR, your interests must be weighed against ours. As long as it is not yet clear whose interests shall prevail, you have the right to demand that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, such data may – apart from its storage – only be processed with your consent or for the purpose of asserting, exercising or defending legal rights or protecting the rights of another natural or legal person or for reasons pertaining to an important public interest of the European Union or a Member State.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
4. Data collection on this website
Cookies
Our webpages use so-called cookies. Cookies are small text files and do not cause any damage on your terminal device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.
Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. displaying videos). Other cookies are used to evaluate user behaviour or display advertisements.
Cookies that are required to implement the electronic communication process to provide certain functions that you have requested or to optimise the website (e.g. cookies for measuring the web audience) (necessary cookies) are stored on the basis of Art. 6(1) e) GDPR, unless another legal basis is given. The website operator has a legitimate interest in the storage of necessary cookies for technically accurate and optimised provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, the storage is based exclusively on this consent (Art. 6(1) a) GDPR and section 25 (1) TTDSG); consent may be revoked at any time.
You can customise your browser in such a way that you are informed of the placement of cookies and permit cookies only in individual cases, block the acceptance of cookies for certain cases or generally as well as activate the automatic deletion of cookies when the browser is closed. Deactivating cookies may limit the functionality of this website.
Insofar as cookies are used by third-party companies or for the purposes of analysis, we will inform you separately about this within the framework of this data protection declaration and, if necessary, request your consent.
Consent with Usercentrics
This website uses Usercentrics consent technology to obtain your consent for certain cookies to be saved on your terminal device or to use certain technologies and document them consistent with data protection requirements. This service is provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter ‘Usercentrics’).
When you enter our website, the following personal data are transmitted to Usercentrics:
- Your consents and/or revocation of such.
- Your IP address
- Information about your browser
- Information about your terminal device
- Time of your visit to the website
Moreover, Usercentrics saves a cookie in your browser to be able to assign your consents and/or their revocation to you. The data captured in this way are saved until you prompt us to erase them, you delete the Usercentrics cookie yourself or the purpose of data storage becomes obsolete. Mandatory statutory retention periods remain unaffected.
Usercentrics is used to obtain the statutorily required consents for using certain technologies. The legal basis is Art. 6(1) c) GDPR.
Commissioned data processing
We have concluded a commissioned data processing agreement (AVV) with the above provider. This is an agreement required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with GDPR.
5. Analysis tools and marketing
Matomo
This website uses the open-source web analytics service Matomo. Matomo uses technologies that enable the user to be recognised across pages for the analysis of user behaviour (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymised before storage.
With the help of Matomo, we are able to collect and analyse data about the use of our website by website visitors. This enables us to find out, among other things, when which page views were made and from which region they originate. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks and similar).
This analysis tool is used to guarantee that our website is secure and optimise it (based on Art. 6(1) e) GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1) a) GDPR and section 25 (1) of the German Telecommunications, Telemedia and Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
IP anonymisation
As part of Matomo analysis, we use IP anonymisation. In so doing, we shorten your IP address before analysis, meaning that you can no longer be clearly identified.
Hosting
We host Matomo exclusively on our own servers, thus ensuring that all analysis data remain with us and are not passed on.
6. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we will need an email address from you as well as information which enables us to check whether you are the authorised account holder of the email address and that the account holder has agreed to receive the newsletter. Any other data are provided on a voluntary basis only. To process the newsletters, we use newsletter service providers as described in the following.
CleverReach
This website uses CleverReachto send newsletters. The provider is
CleverReach GmbH & Co. KG,
//CRASH Building
Schafjückenweg 2
26180 Rastede
Deutschland
Umsatzsteuer-Identnummer: DE230180364
Handelsregister: Amtsgericht Oldenburg / HRA 4020
CleverReach is a service with which dispatch of newsletters can be organised and analysed. The data you enter to subscribe to the newsletter are saved on CleverReach servers in Germany.
Data analysis by CleverReach
We harness CleverReach to analyse our newsletter campaigns. For example, we are able to see whether a newsletter message has been opened and, if relevant, which links have been clicked on. In this way, we are able to establish, among others, which links are particularly frequently clicked on.
Apart from this, we are able to identify whether certain predefined acts are carried out following the link being opened/clicked on.
Sendinblue also enables us to cluster the newsletter recipients based on various categories. In the process, the newsletter recipients can be categorised according to, for example, age, gender or address. This enables the newsletters to be more optimally attuned to the respective target groups.
If you do not want CleverReach to carry out analysis, you need to unsubscribe from the newsletter. We provide a relevant link for this in each newsletter message.
For comprehensive information on the CleverReach functions, please view: https://www.cleverreach.com/de-de/
Legal basis
The processing of these data is lawful on the basis of your consent given (Article 6(1) a) GDPR). You may withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of previous processing.
Duration of storage
We and/or the newsletter service provider will store the data held by us for the purpose of receiving the newsletter until you are unsubscribed from the newsletter and will erase such data from the newsletter distribution list as soon as the newsletter order has been cancelled. Data which are stored by us for other purposes remain unaffected.
Once you have been unsubscribed from the newsletter distribution list, your email address may be saved by us and/or the newsletter service provider in a blacklist if this is required to prevent future mailings. The data from the blacklist are used for this purpose only and not merged with other data. This is both in your interest as well as our interest in observing the statutory regulations in dispatching newsletters. Storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.
More data privacy information is available from CleverReach at: https://www.cleverreach.com/de-de/datenschutz/
Commissioned data processing
We have concluded a commissioned data processing agreement (AVV) with the above provider. This is an agreement required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with GDPR.
7. Plugins und Tools
YouTube with enhanced data protection
This website integrates YouTube videos. The provider of the web pages is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced data protection mode. According to YouTube, this means that it does not save any information about the visitors to this website before they view the video. However, enhanced data protection mode does not necessarily mean that data are not forwarded to YouTube partners. This involves YouTube – irrespective of whether you view a video – connecting to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection is made to the YouTube servers. In this way information about which of our web pages you have visited is passed on to the YouTube server. If you are logged into your YouTube account, you allow YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
Moreover, once a video has started, YouTube can store various cookies on your terminal device or deploy comparable recognition technologies (e.g. device fingerprinting). YouTube can thus receive information about visitors to our website. This information is used, among other things, to collect video statistics, improve usability and prevent fraud attempts.
If required, further data processing operations may be triggered by the start of a YouTube video, which we cannot influence.
We use YouTube in the interest of providing an interesting online website presentation (Art. 6(1) e) GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1) a) GDPR and section 25 (1) of the German Telecommunications, Telemedia and Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
For further information on data protection at YouTube, please view the YouTube Privacy Policy at: https://policies.google.com/privacy?hl=de.
Google Web Fonts (local hosting)
This website uses Web Fonts provided by Google for the purposes of uniform presentation. The Google Fonts have been installed locally. This does not involve a connection to Google servers.
More information about Google Web Fonts is available at https://developers.google.com/fonts/faq and in the Google privacy policy: https://policies.google.com/privacy?hl=de.