Privacy policy

Contact

This is our

Thank you for visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the website of Brüninghoff GmbH & Co. KG website, which can be accessed under the domain www.brueninghoff.de and the various subdomains.

Who is responsible and how do I contact them?

Responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR) is

Brüninghoff GmbH & Co. KG
Industriestraße 14
46359 Heiden

Telefon: +49 2867 9739-0
E-Mail: info(at)brueninghoff.de

Webseite: www.brueninghoff.de or www.brueninghoffgroup.com

The data protection officer

can be reached at

Brüninghoff GmbH & Co. KG
-Datenschutzbeauftragter-
Industriestr. 14
46359 Heiden

E-Mail: datenschutz(at)brueninghoff.de

What is this privacy policy about?

This privacy policy serves to fulfil the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behavior when visiting a website. Information that cannot be linked to your person, e.g. through anonymization, is generally not considered personal data.

What are the legal bases for processing of personal data?

The processing of personal data (e.g. the collection, retrieval, use, storage or transfer) always requires a legal basis and a defined purpose. We will go into the individual bases in more detail in the following sections, but the following generally applies:

As far as we base data processing on your voluntarily given consent, Art. 6 para. 1 sentence 1 lit. a, 7 GDPR serves as the legal basis. You can withdraw your consent at any time and without giving reasons.
If the processing of personal data is necessary for the performance of a contract with you, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing in connection with the implementation of pre-contractual measures.
Where the processing serves to fulfill a legal obligation to which we are subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by us or by a third party and such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis for data processing is Article 6(1)(f) GDPR.

How long will my data be stored?

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. In addition, we delete the processed data or restrict processing in accordance with the statutory provisions, in particular Art. 17 and 18 GDPR. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Regardless of this, we store your personal data in individual cases for the assertion, exercise or defense of legal claims and in the event of statutory retention obligations (e.g. from § 257 para. 1 HGB - 6 years for trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc., as well as § 147 para. 1 AO - 10 years for books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

Who receives my data? (Third country transfers)

We only pass on your personal data that we process on our website to third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis (e.g. consent or protection of legitimate interests) in individual cases. In addition, in individual cases we pass on personal data to third parties if this serves the assertion, exercise or defense of legal claims. Possible recipients may then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.

As far as we use service providers for the operation of our website who process personal data on our behalf as part of order processing in accordance with Art. 28 GDPR, they may be recipients of your personal data. If personal data is transferred to a third country or an international organization, we will inform you about this and the underlying justification. In general, standard contractual clauses in accordance with Art. 46 GDPR are concluded for any third country transfers or other suitable transfer safeguards in accordance with Art. 44 et seq. GDPR are taken. Further information on the use of processors and web services and any third country transfers can be found in the overview of the individual processing operations.

What rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

Information in accordance with Art. 15 GDPR about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data free of charge;
Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
Restriction of processing pursuant to Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful, we no longer need the data, and you oppose their erasure because you require them for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR
Data transfer pursuant to Art. 20 GDPR, if you have provided us with personal data on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format or we will transmit the data directly to another controller if this is technically feasible.
Objection pursuant to Art. 21 GDPR to the processing of your personal data, as far as this is carried out on the basis of Art. 6 para. 1 lit. e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate grounds for the processing are demonstrated or the processing is carried out for the establishment, exercise or defense of legal claims. If the right to object does not exist for individual processing operations, this is indicated there.
Revocation pursuant to Art. 7 para. 3 GDPR of your consent given with effect for the future.
Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

How is my data processed in detail?

Below we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

Providing the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a log file:

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request originates
Browser
Operating system and its interface
Language and version of the browser software.

Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

The processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring the security and stability of our information technology systems on the basis of Art. 6 para. f GDPR. The collection of data and temporary storage in log files is absolutely necessary for the operation of the website. The use of the service provider and the data processing by it is in our legitimate interest in the efficient and secure provision of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Storage period

The aforementioned data is stored for the duration of the display of the website and, for technical reasons, for a maximum of 14 days.

Getting in touch

Type and scope of processing

We offer you the opportunity to contact us via a form provided on our website. The information collected via mandatory fields is required in order to process the request. Alternatively, we offer you the option of contacting us by telephone or email. You can also voluntarily provide additional information that you believe is necessary to process the contact request. To process your request, we may process names, e-mail addresses, the name of your company if applicable, as well as information on the content of your request and telephone number if applicable.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

In the case of purely informational inquiries, your data will be processed on the basis of our legitimate interest in good customer service to enable easy contact and for the purpose of efficient communication and processing in accordance with Art. 6 para. 1 lit. f GDPR. Should your request relate to an existing contractual relationship with us or be in connection with contractual performance obligations, the processing is carried out for the purpose of fulfilling the contract or implementing pre-contractual measures on the basis of Art. 6 para. 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by telephone.

Storage period

We delete your contact requests after your request has been dealt with, unless statutory retention periods require further storage. In the event of further storage, your request will be archived after it has been answered or dealt with. It will then only be possible to view the data to a very limited extent. In the case of purely informational inquiries, we store the data collected for each inquiry for a period of three months, beginning with the completion of your inquiry. These requests are also initially archived after completion.

Application management

Type and scope of processing

We collect various types of information as part of the application process. This includes in particular your personal data with contact information as well as a description of your education, work experience and skills. In addition, you have the option of providing us with electronically stored documents such as certificates or cover letters.

We do not require any information from you that is not usable under the German General Equal Treatment Act (race, ethnic origin, gender, religion or ideology, disability, age or sexual identity). We also ask you not to provide information on illness, pregnancy, ethnic origin, political views, philosophical or religious beliefs, trade union membership, physical or mental health or sex life. The same applies to content that is likely to infringe the rights of third parties (e.g. copyright, press law or general rights of third parties).

Purpose and legal basis

We process your data collected or provided by you in connection with the application process for the purpose of establishing an employment or internship relationship in accordance with Art. 88, Art. 6 para. 1 sentence 1 lit. b GDPR in conjunction with. § 26 para. 1 BDSG. We will process your personal data as part of the application process in order to determine whether you have the skills, aptitude and professional qualifications for the position for which you have applied and whether we can offer you a job.

Data such as name, address, telephone number, e-mail address, etc. are collected in order to use the online application process. This data is generally used to contact you about your application.

If your application is successful, the data provided may be used for administrative matters relating to employment.

Your online application will only be processed and acknowledged by the relevant contact person at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. Under no circumstances will third parties gain knowledge of your details. Data processing takes place exclusively in Germany.

If, after your application has been rejected, you wish us to consider your personal data in a subsequent application process, we will also store your application documents on the basis of your consent, Art. 88, Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with. § 26 para. 2 BDSG. We will obtain your consent separately in this case.

Storage period

If we are unable to offer you a position, we will retain the data you provide for up to six months in compliance with statutory regulations for the purpose of answering questions in connection with your application and rejection or insofar as it is required for the defense or assertion of legal claims. This is also our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

If you give us your explicit written consent to retain and store your data, we may also consider you for future job offers. In this context, we will keep your application documents until the next selection procedure and, as already described in the case of the initial application, destroy them six months after receipt of a rejection, unless longer storage is necessary for the defense of legal claims.

Otherwise, your application data will be deleted completely.

To process online applications, we use the applicant management software Umantis from Haufe-Lexware GmbH & Co. KG, a company of the Haufe Group, Munzinger Straße 9, 79111 Freiburg, Germany. For this purpose, an order processing contract was concluded with Haufe-Lexware in accordance with Art. 28 of the General Data Protection Regulation.

Our presence on social media platforms

1. General information

We maintain so-called fan pages or accounts or channels on the networks listed below in order to provide you with information and offers within social networks and to offer you other ways to contact us and find out about our offers. In the following, we will inform you which data we or the respective social network process in connection with your accessing and using our fan pages/accounts.

Unless otherwise stated, the following information applies to the fan pages or accounts or channels in social networks mentioned below.

Data that we process from you

If you wish to contact us via Messenger or via direct message via the respective social network, we generally process your user name, which you use to contact us, and may store other data provided by you to the extent necessary to process/respond to your request.

The recipient of the personal data of a comment or direct message is the respective social media platform.

We use a social media management tool for Facebook, Instagram, Linkedin, Xing, Kununu, Google and YouTube to perform editorial tasks (recording and responding to inquiries, responding to posts, direct messages and comments, publishing articles). When using the tool, data is necessarily stored temporarily by the licensing service provider, Facelift brand building technologies GmbH, Gerhofstraße 19, 20354 Hamburg, Germany. This is a processor of Brüninghoff in accordance with Art. 28 para. 1 GDPR. The data is stored on a server located in the European Union and includes Profile and account name and picture, content of the request, number of followers and profiles followed by the profile, and latest messages. The data is stored by the service provider for a period of six months and then deleted. The processing of the personal data transmitted by you is necessary for the purpose of processing your request.

The legal basis is Art. 6 para. 1 sentence 1 f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller).

(Static) usage data that we receive from social networks

We receive automated statistics regarding our accounts via Insights functionalities. The statistics include the total number of page views, likes, information on page activity and post interactions, reach, video views/views and information on the proportion of men/women among our fans/followers.

The statistics only contain aggregated data that cannot be linked to individual persons. They are not identifiable to us.

What data the social networks process from you

In order to view the content of our fan pages or accounts, you do not have to be a member of the respective social network and therefore no user account is required for the respective social network.

Please note, however, that the social networks may also collect and store data from website visitors without a user account when the respective social network is accessed.

Information on the exact scope and purposes of the processing of your personal data, the storage period/deletion and guidelines on the use of cookies and similar technologies as part of the registration and use of social networks can be found in the data protection provisions/cookie guidelines of the social networks. There you will also find information on your rights and options to object.

2. Facebook page

We are jointly responsible for the personal content of the fan page with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (a subsidiary of Meta Platforms Inc, 1601 S. California Ave, Palo Alto, CA 94304 USA; “Facebook”). In this context, we have entered into an agreement with Facebook on joint responsibility (Art. 26 GDPR), which regulates the distribution of tasks between the individual controllers. According to this agreement, we and Facebook are jointly responsible for the collection of data via the fan page. Data subject rights can be asserted with Meta Platforms Ireland and with us.

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more information on this under the following link: https://facebook.com/help/pages/insights

It is not possible for us to draw conclusions about individual users based on the statistical information transmitted. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We collect the following additional personal data via our fan page in order to realize a possible provision for communication and interaction with us. This collection generally includes your name, message content, comment content and the profile information you provide “publicly”.

The processing of your personal data for the above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel in accordance with Art. 6 para. 1 f) GDPR. If you as a user have given your consent to data processing to the respective provider of the social network, the legal basis for processing extends to Art. 6 para. 1 a), Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. As a result, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion, objection, etc.). The assertion of corresponding rights is therefore most effectively carried out directly against the respective provider.

The technical responsibility for the processing of Insights data lies with Facebook and Facebook fulfills all obligations under the GDPR with regard to the processing of Insights data, Facebook Ireland provides the essentials of the Page Insights Supplement to the data subjects.

We do not make any technical decisions regarding the processing of Insights data that is carried out by Facebook as the network operator, nor regarding any other information from Facebook resulting from Art. 13 GDPR, including the legal basis, identity of the controller and storage duration of cookies on user end devices.

Further information on the distribution of tasks between the joint controllers can be found directly on Facebook (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

3. Instagram page

We are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (a subsidiary of Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304 USA; “Instagram”) for the personal content of the fan page. In this context, we have entered into an agreement with Instagram on joint responsibility (Art. 26 GDPR), which regulates the distribution of tasks between the individual controllers. According to this, we and Instagram are jointly responsible for the collection of data via the fan page. Data subject rights can be asserted with Meta Platforms Ireland and with us.

When you visit our Instagram page, Instagram collects, among other things, your IP address and other information that is stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides more information on this under the following links: help.latest.instagram.com/788388387972460 and privacycenter.latest.instagram.com/policy.

The technical responsibility for the processing of Insights data lies with Instagram and Instagram fulfills all obligations under the GDPR with regard to the processing of Insights data, Metaverse Platforms provides the essentials of the Page Insights Supplement to the data subjects.

We do not make any technical decisions regarding the processing of Insights data by Instagram as the network operator, nor regarding any other information from Instagram resulting from Art. 13 GDPR, including the legal basis, identity of the controller and storage duration of cookies on user devices.

Further information on the allocation of tasks between the joint controllers can be found directly on Facebook (supplementary agreement with Facebook): www.facebook.com/legal/terms/page_controller_addendum.

4. LinkedIn page

LinkedIn is a social network of LinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Companies can create profiles on which photos and other company information can be uploaded. Other LinkedIn users have access to this information and can write their own articles and share this content with others.

The focus is on professional exchanges on specialist topics with people who have the same professional interests. In addition, LinkedIn is often used by companies and other organizations to recruit employees and present themselves as an interesting employer.

The processing of your personal data and the legal basis are governed by the provisions set out under 1.

You can find more information about LinkedIn at: about.linkedin.com

Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy

Use of the LinkedIn Insight tag

We use an Insight tag from LinkedIn Ireland Unlimited Company (Wilton Plaza, Wilton Place, Dublin 2, Ireland) on our website. The LinkedIn Insight tag is an analysis tool that enables us to measure the effectiveness of our LinkedIn advertising and to tailor our LinkedIn content to your interests.

For this purpose, a connection to the LinkedIn servers is established when you visit our website and Insight Tag is loaded into your browser. LinkedIn thereby receives information about your visit to our website, such as your IP address, the time of your visit, the browser used and the operating system. This data is used to generate reports on the performance of our LinkedIn campaigns and is made available to us in anonymized form.

We are jointly responsible for the personal content of the fan page with LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (a subsidiary of LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA 94085, USA, “LinkedIn”). In this context, we have concluded an agreement with LinkedIn on joint responsibility (Art. 26 GDPR), which regulates the distribution of tasks between the individual controllers. According to this agreement, we and LinkedIn are jointly responsible for the collection of data via the fan page. Data subject rights can be asserted with LinkedIn Ireland Unlimited Company and with us.

The processing of your personal data and the legal basis are governed by the provisions set out under 1.

You can prevent the use of the LinkedIn Insight tag at any time by changing your browser settings or by using browser add-ons. Further information on deactivating the LinkedIn Insight tag can be found at https://www.linkedin.com/help/linkedin/answer/65521/opt-out-of-linkedin-website-retargeting

For more information about LinkedIn's use of data, your rights and the settings options for protecting your privacy, please refer to LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy.

5. Xing page

XING is a social network of XING SE based in Hamburg, Germany, which enables the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Companies can create profiles on which photos and other company information can be uploaded. Other XING users have access to this information and can write their own articles and share this content with others.

The focus is on professional exchange on specialist topics with people who have the same professional interests. In addition, XING is often used by companies and other organizations to recruit employees and present themselves as an interesting employer.

The processing of your personal data and the legal basis are governed by the provisions set out under 1.

You can find more information about XING at https://corporate.xing.com/de/unternehmen/

Further information on data protection at XING can be found at https://privacy.xing.com/de/datenschutzerklaerung

We do not collect or process any personal data via our XING company page.

6. Kununu page

We have a profile on kununu. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Kununu is an internet portal for employer reviews that is affiliated with the business platform Xing. On the Kununu platform, employees in Germany, Austria and Switzerland can anonymously and reliably rate the employment relationships in their companies.

The processing of your personal data and the legal basis are governed by the provisions set out under 1.

You can find further information about kununu at https://www.xing.com/app/share?op=data_protection.

Further information and details on the handling of your personal data can be found at: https://privacy.xing.com/de/datenschutzerklaerung.

7. YouTube channel

YouTube is a video-on-demand service that allows users to upload, watch and share videos, including movie and music clips as well as amateur content. YouTube's offer is subject to the terms of use, which can be found at https://www.youtube.com/t/terms

The provider of the service in the EU/EEA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

The processing of your personal data and the legal basis is governed by the provisions set out under 1.

You can find more information about YouTube at https://www.youtube.com/intl/de/about/

You can find further information on data protection at YouTube at: https://policies.google.com/privacy

Further questions about data protection are answered here: https://policies.google.com/technologies/product-privacy

Podcast on streaming platforms

We maintain the podcast “Baufrequenz” with content on current trends, interviews and topics that concern the construction industry. You can find more information about our podcast at lp.brueninghoff.de/podcast/ Our podcast can be accessed via our YouTube channel and various streaming platforms. We integrate the various streaming platforms via the above link and on our website www.brueninghoff.de through linked graphics or links marked as external. This prevents a connection to the server of the respective platform operator from being automatically established when the website is accessed. You will only be redirected to the external website of the platform operator when you click on the graphic.

As soon as you have been redirected to the respective streaming platform, information is collected by the respective platform operator, whereby it cannot be ruled out that this information and data will be processed in the USA. The respective platform operator is responsible for this data processing.

As a rule, this is technically required data such as the IP address, date, time and page visited. If you are logged into your user account when you visit the platform, the respective platform operator may be able to assign the information to your personal user account. If you act via a “Share” button of the respective platform operator, this information can be stored in your personal user account and published if necessary. If you do not wish this to happen, you must log out of your user account before clicking on the linked graphic, the linked text or the “Share” button.

If you have a user account and subscribe to our podcast (“follower”), we can see your public profile name as a follower.

The platform operators allow us as the podcast provider to view statistics on the use of our podcast with regard to logged-in users. The statistics are not related to individual users, but merely reflect the average in aggregated form. The following statistics can be displayed: Number of followers, proportion of followers by gender, start and stop of individual podcast streams, listening time.

You can listen to and subscribe to our podcast on the following streaming platforms:

1. YouTube

see above

2. Apple Music

Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Republic of Ireland, a subsidiary of Apple Inc, One Apple Park Way, Cupertino, California, USA

3. Spotify

Spotify AB, Regeringsgatan 19, SE-111 53, Stockholm, Sweden

4. Deezer

Deezer, 24 Rue de Calais 75009 Paris, France, a subsidiary of Access Industries Inc, 40 West 57th Street, 28th Floor, New York, New York 10019, USA

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your end device and stored there when you visit our website. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to carry out various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the Consent Manager of this website.

Comply Consent Manager

Type and scope of processing

We have integrated Comply Consent Manager on our website. Comply Consent Manager is a consent solution from Hendrik Paulo Gaffo & Alexander Riegert GbR, Carl-Bremer-Ring 13, 22179 Hamburg, Germany, with which consent to the storage of cookies can be obtained and documented. Comply Consent Manager uses cookies or other web technologies to recognize users and store the consent given or revoked.

Purpose and legal basis

The service is used on the basis of obtaining the legally required consent to the use of cookies in accordance with Art. 6 para. 1 lit. c. GDPR.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Hendrik Paulo Gaffo & Alexander Riegert GbR. Further information can be found in the privacy policy for Comply Consent Manager: https://comply-app.com/privacy-policy

Facebook Pixel

Type and scope of processing

We use Facebook Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (parent company: Meta Platforms Inc., 1 Hacker Way, Menlo Park, California 94025, USA; “Facebook”) to create so-called Custom Audiences, i.e. to segment visitor groups of our online offer, determine conversion rates and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with Meta Platforms Ireland Limited.

Purpose and legal basis

We process your data with the help of Facebook Pixel for the purpose of optimizing our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. GDPR. You can revoke your consent at any time and without giving reasons, e.g. by adjusting your cookie settings via the Consent Manager. For this purpose, we have concluded a joint responsibility agreement with Facebook.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Meta Platforms Ireland Limited. Further information can be found in the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/explanation.

Facebook plugin

Type and scope of processing

We have integrated Facebook plugin components on our website. Facebook Plugin is a service of Meta Platforms Ireland Limited and offers us the opportunity to aggregate content from the social media platform and display it on our website.

When you access this content, you establish a connection to the servers of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Facebook Plugin.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and serves the purpose of a platform-independent provision of content.

Storage duration

Google Analytics

Type and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our website, subpages visited and the time spent by visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

We process data with the help of Google Analytics for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR. You can revoke your consent at any time and without giving reasons, e.g. by adjusting your cookie settings via the Consent Manager.

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google DoubleClick

Type and scope of processing

We have integrated components of DoubleClick by Google on our website. DoubleClick is a Google brand under which special online marketing solutions are primarily marketed to advertising agencies and publishers. DoubleClick by Google transmits data to the DoubleClick server with every impression as well as with clicks or other activities.

Each of these data transfers triggers a cookie request to the data subject's browser. If the browser accepts this request, DoubleClick places a cookie in your browser.

DoubleClick uses a cookie ID, which is required to process the technical procedure. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplication. The cookie ID also enables DoubleClick to record conversions. Conversions are recorded, for example, if a user has previously been shown a DoubleClick advertisement and subsequently makes a purchase on the advertiser's website using the same Internet browser.

A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google obtains knowledge of data that Google also uses to create commission statements. Among other things, Google can see that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Further information and the applicable data protection provisions of DoubleClick by Google can be found at policies.google.com/privacy.

Purpose and legal basis

We process your data with the help of the DoubleClick cookie for the purpose of optimizing and displaying advertising on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR.

The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. The cookie is also used to avoid multiple displays of the same advertisement. Each time you access one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and billing of commissions.

Storage period

Google Maps

Type and scope of processing

We use the map service Google Maps to create directions. Google Maps is a service provided by Google Ireland Limited, which displays a map on our website.

When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google Maps.

Purpose and legal basis

The use of Google Maps is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR, for the purpose of simplifying the location of our company and conveniently calculating the route.

Storage period

Google Tag Manager

Type and scope of processing

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Tag Manager is used to manage website tags via an interface and enables us to control the precise integration of services on our website

This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR, and serves the purpose of optimizing our services.

Storage period

Hotjar

For the statistical analysis of visitor data on our website, we use Hotjar, a product of Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta.

Hotjar is a service that evaluates the behavior and feedback of you as a user on our website through a combination of analysis and feedback tools. We receive reports and visual representations from Hotjar that show us where and how you “move” on our site (for more information, please visit www.hotjar.com/). Hotjar thus helps us to offer you a better user experience and a better service. On the one hand, it provides an analysis of online behavior, and on the other hand, we also receive feedback on the quality of our website. Your personal data is automatically anonymized.

As you browse our website, Hotjar automatically collects information about your user behavior. In order to collect this information, we use cookies on our website, which can be used to collect the following data about your computer or browser:

- anonymized IP address of your computer
- screen size
- Browser information (browser type, version, etc.)
- User location (country only)
- preferred language setting
- websites (subpages) visited
- date and time of access to one of our subpages (websites)

In addition, cookies also store data that is placed on your computer (usually in your browser). No personal data is collected in these cookies. In principle, Hotjar does not pass on any collected data to third parties. However, Hotjar expressly points out that it is sometimes necessary to share data with Amazon Web Services, whereby parts of your information are stored on Amazon Web Services servers in Ireland. Amazon is bound by a confidentiality obligation not to disclose this data. Hotjar also uses third-party companies based in the USA (Sentry, Altinity) for its services. These companies may also store information that your browser sends to our website.

Purpose and legal basis

Hotjar is used on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR, and serves the purpose of optimizing our services.

Storage period

Hotjar has imposed a 365-day data retention period for all data sent to Hotjar's servers for processing. This means that all data collected by Hotjar that is older than one year is automatically deleted.

You can find more details on the privacy policy and what data is collected by Hotjar and how at https://www.hotjar.com/legal/policies/privacy/de/.

Notice to persons under the age of 16

Our website is not intended for children under the age of 16 and we will not intentionally collect, use, provide or otherwise process personal data from children under the age of 16.

We therefore ask persons under the age of 16 not to send us any personal data (e.g. name, address and e-mail address). If you are under the age of 16 and wish to ask a question or use this website in any way that requires you to provide your personal data, please ask your parent or guardian to do so on your behalf.

Changes to this statement

From time to time, we may make changes to this Privacy Policy. If we make material changes to this Privacy Policy and the way we use your personal information, we will post those changes on this page and will do our best to notify you of any material changes. Please check our privacy policy regularly.

Status 09/2024