Data protection information according to Art. 13, 14 GDPR

1. Information on the processing of personal data

(1) In the following we inform you about the processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

(2) Controller pursuant to Art.  4 para.  7 General Data Protection Regulation (GDPR) is

Althammer & Kill GmbH & Co. KG,

Roscherstraße 7,

30161 Hannover,

Germany

(3) You can contact our data protection officer at the above-mentioned postal address with the addition –Data Protection Officer – or at the e-mail address:

[email protected]

2. Rights of data subjects

(1) You have the following rights vis-à-vis us with regard to your personal data:

– Right of access (Art. 15 GDPR),

– Right to rectification or erasure (Art. 16 and 17 GDPR),

– Right to restriction of processing (Art. 18 GDPR),

– Right to object to processing (Art. 21 GDPR),

– Right to data portability (Art. 20 GDPR).

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Art. 77 GDPR).

3. Collection of personal data when visiting our website

(1) If you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art.  6 para.   1  sentence 1 lit. f GDPR):

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– amount of data transferred in each case

– Website from which the request comes

– Browser

– Operating system and its interface

– Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case by us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and functionality of which are explained below:

– Transient cookies (see b)

– Persistent cookies (see c)

– Third-party cookies (see d)

b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

d) Third-party cookies are offered by other third parties that are not the controller of the website. These are used for identification for range measurements or marketing purposes.

(4)  You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all functions of this website.

4. Further functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data, which we use to provide the respective service.

(2) In order to be able to provide some services, we use external service providers. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked.

(3) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the respective offer.

5. Objection or revocation against the processing of your data

(1) If you have given us your consent to the processing of your personal data, you can revoke this at any time. The revocation unfolds its effect for the future, so that we may no longer process your personal data from the time of revocation.

(2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection, on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time.

(4) You can address your revocation or objection at any time to the contact addresses mentioned under § 1.

6. SSL or TLS encryption

(1) For security reasons and to protect the transmission of confidential content, we use SSL or TLS encryption on our website. In this way, inquiries via the contact form or orders via the site can be transmitted securely. You can recognize SSL or TLS encryption by the addition "https://" in the address bar of the Internet browser and by a closed lock symbol shown next to it.

(2) If SSL or TLS encryption is activated, data can be transmitted to us via the website without being able to be read by third parties.

7. E-mail contact and use of the contact form

(1) To contact us, you can use the contact form or the specified e-mail address. Personal data such as name, e-mail address or telephone number are processed. We process the data provided here by the user exclusively to contact you and to process your associated request.

(2) According to Art. 6 para. 1 sentence 1 lit. f GDPR, the legal basis for the processing of this data is our legitimate interest in contacting and processing your request.

(3) If the request via the contact form or the e-mail leads to the conclusion of a contract, the processing of the data provided is necessary for the fulfilment of a contract. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

(4) The data provided will be processed until they are no longer required to achieve the purpose. The achievement of the purpose does not apply if the user's request could be conclusively clarified and the contact is thus terminated.

(5) The user has the possibility to object to data processing at any time. In this case, the data provided for contacting us will be deleted and no longer used. The objection must be addressed to the contact addresses mentioned under § 1.

8. Newsletter Subscription

(1) We offer a newsletter on our website in which we inform you about our goods and services as well as various offers. When registering for the newsletter, personal data is collected. Your e-mail address is necessary in order to be able to send you the newsletter. All other information you provide is voluntary and serves only for personal contact in the newsletter.

(2) We will only store the data you provide if you have given it to us with your effective consent. In order for us to obtain your consent in a legally effective manner, we use the so-called double opt-in procedure. For this purpose, we will send you a message with a confirmation link to the e-mail address you have entered. If you confirm this link, you have successfully registered for the newsletter. If you do not confirm this link within 24 hours, it will expire. With this confirmation, we store your e-mail address, IP address and the time of registration. This data serves us as proof of registration and to detect possible misuse of your personal data.

(3) The legal basis for the processing of data when subscribing to the newsletter is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.  You can revoke your consent for the newsletter at any time. You can address this to the contact addresses mentioned under § 1 or by clicking on the link to unsubscribe from the newsletter in a newsletter received from us. If you revoke your consent or unsubscribe from the newsletter, you will no longer receive a newsletter in the future and we will delete your data provided in this regard.

9. Data protection for applications and in the application process

(1) We collect and process personal data of applicants who send us their data by e-mail, a corresponding contact form, an application portal or by post. We process the data provided for the purpose of handling the application process. The legal basis for this is Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 BDSG new.

(2) If the application procedure is positive and leads to the conclusion of an employment contract with the applicant, the data transmitted by the applicant will be further processed for the purpose of processing the employment relationship. Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 BDSG new.

(3) We will only process special categories of personal data if you have transmitted them to us so that we can consider your application in its present form or if there is a legal obligation. This information will not be taken into account in the application process, unless there is a legal obligation to do so. The legal basis for this is Art. 9 para. 2 lit. b and e GDPR.

(4) If the application procedure ends without concluding an employment contract with the applicant, the data provided by the applicant will be deleted no later than 6 months after notification of the decision. The reason for this is our other legitimate interests, e.g. for the documentation of the burden of proof and proof for possible proceedings under the General Equal Treatment Act.

(5) If the applicant wishes to be considered for other potential positions in the company despite rejection in the application process, we will obtain appropriate consent for the further processing of the data from the applicant. The data provided by the applicant will be deleted after 1 year from the granting of consent, unless the applicant withdraws his consent at an earlier date. The same applies to unsolicited applications.

(6) The revocation is to be addressed to the contact addresses mentioned under § 1.

10. Use of Google Analytics

(1) We use Google Analytics on our website. Google Analytics is a tracking tool provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Further information can be found here: Terms of use: http://www.google.com/analytics/terms/de.html,  overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

(2) Google Analytics stores cookies on your computer, with which the analysis of the use of our website can be carried out. Data such as the IP address of the user, the website accessed, the website from which the user came to our website, the subpages accessed from the page accessed, the length of stay and the frequency of access to our website are stored. The information generated by the cookie is usually transmitted to a Google server in the USA and stored there.

However, if IP anonymisation is activated on our website, your IP address will be shortened beforehand by Google within the member states of the European Union or in another state party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. This data is used to compile information about the use of the website and reports, as well as to improve our offer and make the website more interesting.

(3) We use Google Analytics on our website with the extension "_anonymizeIp()". This shortens your IP address so that a reference to your person can no longer be drawn.

(4) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(5) The legal basis for the processing of data using Google Analytics is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR for the analysis and better design of our website.  This consent is voluntary. Consent can be refused without giving reasons, without you having to fear disadvantages. The consent can be revoked at any time in text form (e.g. letter, e-mail). The revocation must be sent to the contact addresses mentioned under § 1.

You can change your cookie settings at any time under the following link.

(6) If you want to prevent the setting and storage of cookies, you can arrange this by making the appropriate settings of your browser. In this case, however, we would like to point out that not all functions of our website may be fully usable.

(7) In addition, you can prevent Google Analytics from setting a cookie to process your data by downloading and installing the browser plug-in:  http://tools.google.com/dlpage/gaoptout?hl=de.

11. Integration of Vimeo videos

(1) We have integrated Vimeo videos on our website, which are stored and viewable on the Vimeo platform. Vimeo is a platform of Vimeo LLC based in White Plains, New York. We use Vimeo videos specially created and embedded by us with the "so-called "so-called Vimeo videos". Do-No-Track-Bezeichnung". This means that your data referred to in paragraph 2 will not be transferred until you also play the video. Otherwise there will be no transmission.

(2) When you visit our website, Vimeo receives information that you have accessed the corresponding subpage as well as the data mentioned under § 3. This happens regardless of whether you have a Vimeo user account or not. If you have a Vimeo user account and are logged in via your Vimeo account at the time of visiting our website, this data will be assigned directly to your user account. If you do not wish the data to be merged with your user account, you must log out before activating the button. Vimeo uses this data for the creation of user profiles but also for advertising purposes, market research or for the needs-based design of its websites. Vimeo in turn transmits and shares your data with other third parties. You have the possibility to object to the creation of such user profiles. However, you must address this objection directly to Vimeo (Vimeo, Inc. , Attention: Data Protection Officer, 555 West 18th Street, New York, New York 10011;  [email protected] ).

(3) Vimeo's privacy policy provides you with further information on the type and scope of data processing. Further rights, setting options and other information for the protection of your data can be found at: https://vimeo.com/privacy.

12. DoubleClick by Google

(1) We use DoubleClick by Google on our website. DoubleClick by Google is a product of Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA.  Cookies are stored on your computer to serve user-targeted advertising, improve campaign performance reports, or prevent users from seeing an ad multiple times. Via cookie ID, Google can record conversions related to ad requests. If the user sees a DoubleClick ad and visits the advertiser's page at a later date to order something, this can be tracked by Google. According to Google, however, the information is processed pseudonymously.

(2) The legal basis for the processing of data using DoubleClick by Google is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR for the analysis and better design of our website.  This consent is voluntary. Consent can be refused without giving reasons, without you having to fear disadvantages. The consent can be revoked at any time in text form (e.g. letter, e-mail). The revocation must be sent to the contact addresses mentioned under § 1.

You can change your cookie settings at any time under the following link.

(3) DoubleClick establishes an automatic connection from your Internet browser to the Google server. We have no influence on the type and scope of data used by Google. As far as we know, we can inform you as follows: Google receives information through the tool DoubleClick that you have accessed a corresponding page of our website or clicked on an advertisement from us. If you have a user account with Google, this data can be merged with the data from your user account. If you do not have a user account or are not currently logged in, it is still possible that Google processes and stores your IP address and other identifying features.

(4) If you want to prevent the setting and storage of cookies, you can arrange this by making the appropriate settings of your browser. In this case, however, we would like to point out that not all functions of our website may be fully usable. In addition, you can prevent data processing by Google in the following ways: Disabling cookies for conversion tracking by setting the browser to  block  cookies from domain www.googleadservices.com https://www.google.de/settings/ads, whereby this setting is deleted when you delete your cookies. Or by deactivating the ads of providers who are part of "About Ads" via the following link http://www.aboutads.info/choices this setting will also be deleted if you delete your cookies.

(5) Further information on DoubleClick by Google can be found under https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, as well as on data protection at Google in general: https://www.google. de/intl/de/policies/privacy

13. External service providers

1. Cloudflare

In order to protect our websites and our system against attacks, the service provider Cloudflare is used. To do this, we route all our web traffic through the systems of this service provider. There is an encrypted connection from your PC to the nearest Cloudflare data center and a second encrypted connection from there to us.

Cloudflare's Content Delivery Network (CDN) consists of many servers that maintain copies of the website's static data, such as images, videos, and immutable text. These servers are located in data centers near you that have high-performance Internet connections. In this way, they deliver these elements to you particularly quickly and without burdening the central systems. So you improve your usage and at the same time protect the system from overload.

When you visit this page, the following data is processed:

• Information about the browser used (browser type/version/language)

• Your IP address

• Date and time of access

• Time zone difference from Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Technical metadata (http header)

The data is used for the following purposes in CDN:

• Respond faster to your queries from the CDN cache

• Fend off attacks on the system

This is due to our legitimate interest in operating our website securely and stably and in being able to play the existing videos faster.

The data is automatically deleted by Cloudflare after 4 hours.

The recording of the data in the CDN is necessary in order to be able to offer the service around the system quickly and reliably. For this purpose, the transmission of the aforementioned data is technically necessary.

Legal basis of data processing

The data transmission is carried out to provide additional functionalities on the basis of our legitimate interest, in accordance with Art. 6 para. 1 lit. f) GDPR and § 25 para. 2 no. 2 TTDSG.

2. New Relic

We use New Relic, a service of New Relic, Inc., 188 Spear St, San Francisco, CA 94105, USA (hereinafter "New Relic"), with which we can monitor and evaluate the performance of our website. We use the service for statistical evaluation of the speed of the website, to determine whether the website can be accessed and how quickly the respective page is displayed when it is accessed. In addition, we use the service to ensure the functionality of the applications on our website.

On our behalf, New Relic processes the IP address and geographical location, browser and device information (e.g. the operating system), as well as the time span of display for the clicked website. The IP address is usually deleted immediately, in exceptional cases no later than 24 hours after collection, in order to exclude a personal reference.

In this context, New Relic uses so-called session cookies, which serve to recognize the browser in order to enable us to determine the statistical data more precisely.

Please note, however, that New Relic may transfer data to a country outside the European Union (EU) and the European Economic Area (EEA) and to a country that does not offer an adequate level of data protection, in particular to the USA. The possible processing of your data outside the EU or the EEA is based on so-called standard contractual clauses of the EU Commission, in accordance with Art. 46 para. 2 lit. c GDPR, which you are welcome to request from us.

Legal basis of data processing

The legal basis for the processing of this data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. You can revoke your consent at any time in the cookie banner.

For more information about New Relic's privacy policy, please visit https://newrelic.com/termsandconditions/services-notices.

3. Iubenda

We use a tool of iubenda s.r.l, Via San Raffaele, 1 - 20121 Milan (Italy) to provide our Cookie Consent Manager.  We hereby offer you the opportunity to accept or reject cookies  requiring consent.

Legal basis of data processing

The data transfer is carried out on the basis of our legitimate interest, in accordance with Art. 6 para. 1 lit. f) GDPR and § 25 para. 2 no. 2 TTDSG.

4. Lead forensics

The software tool Lead Forensics of Lead Forensics, Building 3000, Lakeside, North Harbour, Portsmouth, PO6 3EN, UK, is active on our website. This software does not use cookies, but only collects the IP address when you visit our website. This IP address is then transmitted to Lead Forensics and compared with their own databases.

Lead Forensics collects, processes and stores data about companies and decision makers. These are limited to first name, last name, e-mail address, social profiles (limited to LinkedIN) and the business IP address. Other business-related data may also be processed, such as company name, function, turnover and business address. As soon as the data comparison has taken place, the IP address is anonymized by Lead Forensics.

There is an adequacy decision on the transfer to Great Britain (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de), i.e. personal data may flow freely from the European Union to the United Kingdom, as they enjoy a level of protection equivalent to that guaranteed by EU law.

After such data matching, we receive from Lead Forensics the information from their database that could be assigned to the IP address in question. This allows us to know who is interested in our products and services and to get in direct contact with visitors to our website.

Legal basis of data processing

The legal basis for the processing of this data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.  You can revoke your consent at any time in the cookie banner.

5. Full story

This website uses Fullstory, a service of Fullstory Inc., 818 Marietta Street, Atlanta, GA 30318, USA. Fullstory records user behavior on our website. The recordings of visitor sessions allow us to analyze them and subsequently improve the website experience for visitors. Fullstory stores and collects data in anonymous form using cookies. You can deactivate tracking (i.e. the collection of data generated by the cookie and related to the use of the website) at any time. Please follow the instructions on https://www.fullstory.com/optout.

Please note, however, that Fullstory may transfer data to a country outside the European Union (EU) and the European Economic Area (EEA) and to a country that does not offer an adequate level of data protection, in particular to the USA. The possible processing of your data outside the EU or the EEA is based on so-called standard contractual clauses of the EU Commission, in accordance with Art. 46 para. 2 lit. c GDPR, which you are welcome to request from us.

We use Fullstory to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.

Legal basis of data processing

The legal basis for the processing of this data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. You can revoke your consent at any time in the cookie banner.

14. Use of YouTube Video

YouTube Video is a streaming service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google") We use the YouTube embedding function on our website, which enables us to display and play videos on our website.

To protect your data, we use a so-called consent banner in connection with our embedded YouTube videos. With the help of this banner, we can prevent your data from not being processed by YouTube when you access the page on which the YouTube video is integrated, but only with your consent. In addition, we use the extended privacy mode on our website, which means that your videos viewed are not used for personalizing browsing on YouTube or for personalizing advertising. When playing a video on our website, YouTube uses local storage. As part of this service, Google processes the IP address, browser and device information (e.g. the operating system), the reference URL, as well as information about the videos viewed.

Google is responsible for the data processing described above. Please note that Google transmits the above information to Google's servers in the USA (see chapter Data transfers to third countries).

Legal basis of data processing

The data is collected in accordance with § 25 para. 1 TTDSG, the subsequent data processing in accordance with Art. 6 para. 1 lit. a) on the basis of your express consent. You can revoke your consent at any time with effect for the future by updating your preferences here.

For more information about Google's privacy policy, please visit https://policies.google.com/privacy?hl=de.

15. Data integrity

We also use technical and organizational security measures to protect accruing or collected personal data, in particular. against accidental or intentional manipulation, loss, destruction or against attack by unauthorized persons. Our security measures are continuously improved in line with technological developments.

The transmission of your personal data is encrypted using SSL technology (https) to prevent access by unauthorized third parties.

16. Communication by e-mail

Our e-mail systems support encrypted communication via SSL technology (TLS 1.2 incl. PFS). The transmission of your e-mail can therefore always be encrypted. Please note, however, that encryption also depends on the configuration of your e-mail program and therefore we cannot guarantee complete data security for the transport route.

For information with a high need for secrecy, we recommend that you send it by post.