Source: https://www.knipp.de/company/info/privacy-statement?set-language=en
Timestamp: 2019-04-18 16:16:03+00:00

Document:
Personal data (hereinafter mostly referred to as "data") are processed by us only within the scope of necessity and for the purpose of providing a functional and user-friendly website, including its content and the services offered thereon.
Pursuant to Article 4 (1) of Regulation (EU) 2016/679, that is to say the General Data Protection Regulation (hereinafter referred to as the "GDPR"), "processing" means any process carried out with or without the aid of automated procedures or any such process series of operations relating to personal data, such as collecting, organizing, storing, adapting or modifying, reading out, querying, using, disclosing through transmission, dissemination or any other form of provision, matching or linking, restriction, deletion or annihilation.
Responsible provider of this website in terms of data protection and the data protection officer is listed with other legal information in the Legal Information.
on complaint to the supervisory authority, if they consider that the data concerning them are processed by the provider in breach of data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to disclose any correction or deletion of data or the restriction of processing, pursuant to Articles 16, 17 para. 1, 18 GDPR, to all recipients, to whom data has been disclosed by the provider. However, this obligation does not exist insofar as this notification is impossible or disproportionate. Notwithstanding, the user has a right to be informed about these recipients.
Likewise, according to Art. 21 GDPR, users and data subjects have the right to object to the future processing of data concerning them, provided that the data is processed in accordance with Art. 6 para. 1 lit. f) GDPR by the provider . In particular, an objection to the processing of data for direct marketing purposes is permitted.
Personal data processed using our website will be deleted or blocked as soon as the purpose of the storage is omitted, the deletion of the data does not conflict with any statutory storage requirements and subsequently no other specifications on individual processing methods are provided.
For technical reasons, in particular to ensure a secure and stable website, meta data which is transmitted through the Internet browser to us is saved. With these so-called server log files information, such as type and version of the Internet browser, the operating system, the website from which a user changed to our website (referrer URL), the website(s) of our website that is visited, the date and time of access and the IP address of the Internet connection, from which the use of our Internet presence takes place.
This data will be stored temporarily. Thereby, the data will not be stored collectively with other data.
This storage is based on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted at the latest after sixty days, as far as no further storage for preservation of evidence is necessary. Otherwise, the data will be wholly or partially exempted from deletion until the final clarification of an incident.
The processing of this data makes our website more user-friendly, effective and secure, as the processing allows, for example, certain captcha or log-in functionalities.
The legal basis for this processing is Article 6 (1) (b) of the GDPR, provided that these cookies are used to initiate a contract or to process the contract.
If the processing does not serve to initiate or execute the contract, our legitimate interest lies in improving the functionality of our website. Legal basis is then Art. 6 para. 1 lit. f) GDPR.
Cookies exist for different periods of time in the Internet browser of the data subject: In case of session cookies, these are deleted automatically when the Internet browser is closed.
In some cases, for technical reasons, cookies are generated that outlast a session. These cookies exist for different periods of time and will only be deleted when they reach a specific date. However, the user can delete them at any time in the Internet browser and also see the duration for which a specific cookie will be stored.
The storage of cookies can be prevented or restricted by certain configurations in the Internet browser's settings. Previously saved cookies can be deleted at any time. However, the necessary steps and measures depend on the specific Internet browser. By using the help function or documentation of the Internet browser or contacting its manufacturer or support further information regarding these settings can be obtained.
If the storage of cookies is prevented or restricted, not all functions of our website may be fully usable or functional as expected.
The data transmitted by for the use of our goods and / or service offer are processed by us for the purpose of contract execution and are required to that extent. Contract processing and execution are not possible without provision of the data.
Upon completed contract execution the data is deleted, but we must comply with the tax, regulatory and commercial retention periods.
If a customer account is created or requested via our website, we will gather, use and save the data entered during registration (e.g. name, address or e-mail address) exclusively for pre-contractual services, for the fulfillment of the contract or for the purpose of customer care (e.g. to provide an overview of previous orders with us or to offer the so-called memo function). At the same time we then save the IP address and the date of registration plus the time. Of course, a transfer of this data to third parties will not take place.
Insofar as consent to this processing is provided, Art. 6 para. 1 lit. a) GDPR is the legal basis for processing.
If the opening of the customer account additionally serves pre-contractual measures or the fulfillment of the contract, then the legal basis for this processing is also Art. 6 para. 1 lit. b) GDPR.
Consent to the creation and maintenance of the customer account can be withdrawn at any time with effect for the future, in accordance with Art. 7 para. 3 GDPR. To do so, the data subject only has to inform us about its withdrawal in writing.
The data collected will be deleted as soon as the processing is no longer necessary. However, we must observe tax, regulatory and commercial retention periods.
We provide a free newsletter for customers and interested parties. We use the data collected exclusively for sending the newsletter – it is therefore not disclosed to third parties.
The legal basis here is Art. 6 para. 1 lit. a) GDPR.
In accordance with Art. 7 para. 3 GDPR, consent to the newsletter can be revoked at any time with effect for the future. For this, the data subject only has to inform us about its withdrawal in writing or press the unsubscribe link contained in each newsletter.
If we are contacted via contact form or e-mail, the data provided will be used to process the request. The data is necessary for processing and answering the inquiry – without provision of this data we can not answer the inquiry or at best only to a limited extent.
The data will be deleted, provided that the request has been finally answered and the deletion does not conflict with any statutory storage requirements, such as a subsequent contract execution.
In our website we use Matomo. This is an open source software with which we can analyze the use of our website. Matomo processes IP address, the website(s) that have been visited, the website from which our website was entered (referrer URL), the time on our website and the frequency of access to one of our websites.
To record this data Matomo stores a cookie on the respective device via the Internet browser.
Legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis and optimization of our website.
However, we use Matomo with the anonymization function "Automatically Anonymize Visitor IPs". This anonymization feature shortens the IP address by two bytes, which makes it impossible to associate it to the data subject or the Internet connection it has used.
If the data subject does not agree with this processing, it has the option of preventing the cookie from being stored in its Internet browser. For more information, see "Cookies" above.
In addition, the data subject has the option of terminating the analysis of the usage behavior by opting out. By confirming the link hereafter a cookie is stored the respective device via the Internet browser, which prevents further analysis. It is needed to press the link below again if the cookies stored on the device are deleted.
Google-Maps is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereafter referred to as "Google."
Google's certification under the EU-US Privacy Shield warrants that Google complies with EU privacy rules when processing US data.
We offer the opportunity to apply for a job via our website. Thereby the application data will be collected and processed electronically by us for executing the application process.
Legal basis for this processing is § 26 Abs. 1 S. 1 BDSG i.V.m. Art. 88 para. 1 GDPR.
If an employment contract is concluded, we will save the data submitted in the application in the personal file for the purpose of the normal organizational and administrative process – of course, taking into account the wider legal obligations.
Legal basis for this processing is also § 26 Abs. 1 S. 1 BDSG i.V.m. Art. 88 para. 1 GDPR.
When an application is rejected, we will automatically delete the data submitted to us two months after notification of the rejection. However, the deletion does not take place if longer data retention periods of up to four months or until the completion of legal proceedings are required by law, for example because of the burden of proof under the AGG.
Legal basis in this case is Art. 6 (1) lit. f) DSGVO and § 24 Abs. 1 Nr. 2 BDSG. Our legitimate interest lies in legal defense and enforcement.
If the data subject expressly agreed to a longer storage of data, for example, for inclusion in an applicant or interest database, the data will be further processed on the basis of this consent. Legal basis is then Art. 6 para. 1 lit. a) GDPR. Of course, consent can be revoked at any time according to Art. 7 para. 3 GDPR. To do so, the data subject only has to inform us about its withdrawal in writing.

References: Art. 77
 Art. 21
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 7
 Art. 6
 § 26
 Art. 88
 § 26
 Art. 88
 Art. 6
 § 24
 Art. 6
 Art. 7