Source: https://www.apcoa.it/en/privacy/
Timestamp: 2019-04-26 04:56:49+00:00

Document:
Thank you for your interest in our company. Data protection is particularly important to the management of APCOA PARKING Holdings GmbH. Use of the Internet pages of APCOA PARKING Holdings GmbH is generally possible without the disclosure of any personal data. However, if a data subject wishes to make use of special services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent from the data subject.
APCOA PARKING Holdings GmbH, as the data controller responsible for processing, has implemented numerous technical and organizational measures to ensure the most comprehensive possible protection of personal data processed via this website. Nonetheless, Internet-based data transmissions can always have security gaps, so that an absolute protection cannot be guaranteed. For this reason, each data subject is free to provide us with personal data via alternative means, for example by telephone.
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without further information, provided that such additional information is kept separately, and that technical and organisational measures are implemented to ensure that the personal data is not attributed to an identified or identifiable natural person.
The responsible or data controller is the natural or legal person, public authority, body or other institution which, alone or in conjunction with others, will decide on the purposes and means of the personal data processing. Where the purposes and means of this processing are prescribed by Union law or by the law of the Member States, the data controller may, or may in accordance with Union law or the law of the Member States, stipulate the specific criteria for his designation.
A third party is a natural or legal person, public authority, institution or other body other than the data subject, the data subject, the data processor and those persons who are authorized to process personal data under the direct responsibility of the data controller or the external processor.
You can reach our data protection officer under GDPR[at]apcoa.eu, or through our postal address with the addition "the data protection officer".
Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection matters.
By using cookies, APCOA Parking Holdings GmbH can provide users of this website with more user-friendly services that would not be possible without cookies.
The website of APCOA Parking Holdings GmbH collects a series of general data and information each time a data subject or an automated system accesses the website. This general data and information is stored in the log files of the server. We may record (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the sub-websites which are accessed via an accessing system on our website, (5) the date and time of access to the Website, (6) an Internet Protocol address (IP address), (7) the Internet service providers of the accessing system, and (8) other similar data, and information used for security purposes in the event of attacks on our information technology systems.
When using this general data and information, APCOA Parking Holdings GmbH does not draw any conclusions about the data subject. This information is rather required to (1) correctly deliver the contents of our website, (2) optimize the contents of our website and the respective advertising, (3) ensure the permanent functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. APCOA Parking Holdings GmbH will therefore evaluate this anonymously collected data and information both statistically, and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
The data subject may register on the website of the data controller and provide the respective personal data. The personal data transferred to the data controller is determined by the respective input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the data controller and for the own purposes. The data controller may arrange for the data to be transferred to one or more processors, such as a parcel service, who may also utilize the personal data exclusively for internal use attributable to the data controller.
Furthermore, the IP address assigned by the Internet Service Provider (ISP) to the data subject, the date and time of registration are stored when the data subject registers on the data controller's website. This data is stored against the background that this is the only way to prevent misuse of our services and, if necessary, to enable us to investigate crimes committed. In this respect, the storage of such data is necessary in order to safeguard the data controller. As a matter of principle, this data will not be passed on to third parties unless there is a legal obligation to pass it on, or the passing on of this data serves criminal prosecution purposes.
Registration of the data subject with the voluntary provision of personal data serves the data controller to offer the data subject content or services which, by their nature, can only be offered to registered users. Registered persons may at any time modify the personal data provided during registration, or have it deleted completely from the database of the data controller.
The data controller shall at all times, upon request, inform each data subject of the personal data relating to that data subject. Furthermore, the data controller shall correct or delete personal data at the request or notice of the data subject, provided that there is no legal obligation to store such data in safekeeping. All employees of the data controller will be available to the data subject as contact persons in this context.
On the website of APCOA Parking Holdings GmbH, users are provided with the opportunity to subscribe to our company's newsletter. The input mask used for this purpose determines which personal data is transmitted to the data controller when the newsletter is requested.
APCOA Parking Holdings GmbH informs its customers and business partners at regular intervals by means of a newsletter about current company offers. Our company's newsletter can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject has registered to receive the newsletter. As part of the double opt-in procedure and for legal reasons, a confirmation e-mail in will be sent to the e-mail address entered by a data subject, prior to the first newsletter dispatch. This confirmation mail serves to verify whether the owner of the e-mail address has authorised the receipt of the newsletter as the data subject.
When registering for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) of the computer system used by the data subject at the time of registration, as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of the e-mail address of a data subject at a later point in time, and is therefore used for the legal protection of the data controller responsible for the processing.
The APCOA Parking Holdings GmbH newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in e-mails that are sent in HTML format to allow a logging and log file analysis. This enables a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded tracking pixel, APCOA Parking Holdings GmbH can recognize whether and when an e-mail was opened by a data subject, and which links in the e-mail were accessed by the data subject.
Such personal data collected via the counting pixels in the newsletters will be stored and evaluated by the data controller in order to optimise the sending of the newsletter, and to adapt the content of future newsletters even better to the interests of the data subject. This personal data will not be passed on to third parties. Data subjects are entitled at any time to revoke the respective separate declaration of consent given via the double opt-in procedure. After a revocation, these personal data will be deleted by the data controller. If you unsubscribe from the newsletter, APCOA Parking Holding GmbH will automatically interpret this as a revocation.
Due to legal regulations, the website of APCOA Parking Holdings GmbH contains information that enables the rapid electronic contact with our company and direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If a data subject contacts the data controller via e-mail or a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data that is voluntarily provided by a data subject to the data controller, will be stored for the purpose of processing or contacting the data subject. This personal data is not passed on to third parties.
The data controller shall process and store the personal data of the data subject only for the time necessary to achieve the data retention purpose, or to the extent provided for by the European regulator or the laws of another legislator, or regulations to which the data controller is subjected.
If the purpose of the storage is no longer given, or a retention period prescribed by the European guideline and legislator or another competent legislator expires, the personal data is blocked or deleted routinely and according to the legal regulations.
Every data subject shall have the right, granted by the European guideline and regulatory body, to request confirmation from the data controller whether or not personal data relating to him/her is being processed. If a data subject wishes to exercise this right of confirmation, he may contact an employee of the data controller at any time.
the passing of an automated decision-making, including profiling pursuant to Article 22 para. 1 and para. 4 of the GDPR and - at least in these cases - meaningful information on the logic involved, as well as the scope and intended impact of such processing on the data subject.
If a data subject wishes to exercise this right of confirmation, he may contact an employee of the data controller at any time.
If a data subject wishes to exercise this right of correction, he may contact an employee of the data controller at any time.
The personal data was collected for such purposes or processed in any other way for which it is no longer necessary.
The data subject revokes his or her consent on which the processing is based pursuant to Article 6 para. 1 lit. a of the GDPR, or Article 9 para. 2 lit. a of the GDPR and there is no other legal basis for the processing.
The data subject submits an objection to the processing pursuant to Article 21 para. 1 of the GDPR and there are no overriding valid grounds for the processing, or the data subject submits an objection to the processing in accordance with Article 21 para. 2 of the GDPR.
Deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
If one of the above-mentioned reasons applies, and a data subject wishes to have personal data stored at APCOA Parking Holdings GmbH deleted, he or she may contact an employee of the data controller at any time. The employee of APCOA Parking Holdings GmbH shall arrange for the request of deletion to be complied with without delay.
If the personal data was made public by APCOA Parking Holdings GmbH and our company is responsible pursuant to Art. 17 Para. 1 GDPR, APCOA Parking Holdings GmbH shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, in order to inform other data controllers who process the published personal data, that the data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data from these other data controllers, insofar as the processing is not necessary. The employee of APCOA Parking Holdings GmbH will take the necessary steps in individual cases.
The correctness of the personal data is contested by the data subject with a time frame that is sufficient to enable the data controller to verify the correctness of the personal data.
The processing is unlawful, the data subject refuses to delete personal data and instead demand that the use of personal data be restricted.
The data controller no longer needs the personal data for the purposes of processing, but the data subject does need it for asserting, exercising or defending legal claims.
The data subject has lodged an objection to the processing pursuant to Art. 21 para. 1 GDPR, and it is not yet clear whether the justified grounds of the data controller outweigh those of the data subject.
If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by APCOA Parking Holdings GmbH, he may contact an employee of the data controller at any time. The employee of APCOA Parking Holdings GmbH will arrange for processing to be restricted.
Any data subject affected by the processing of personal data shall have the right, granted by the European guideline and regulation provider, to receive personal data relating to the data subject by the data controller in a structured, established and machine-readable format. This person also has the right to transfer this data to another data controller without hindrance by the data controller to whom the personal data has been made available, provided that the processing is based on a consent in accordance with Art. 6 para. 1 lit. a of the GDPR or Art. 9 para. 2 lit. a of the GDPR or on a contract pursuant to Art. 6 para. 1 lit. a of the GDPR or Art. 9 para. 2 lit. a of the GDPR. 6 para. 1 lit. b GDPR, and the processing is carried out by means of automated procedures, provided that the processing is not necessary for the performance of a task which is in the public interest, or in the exercising of official authority which has been delegated to the data controller.
Furthermore, in exercising its right to transfer data pursuant to Art. 20 para. 1 of the GDPR, the data subject has the right to have the personal data transmitted directly by a data controller to another data controller, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons.
The data subject may contact an employee of APCOA Parking Holdings GmbH at any time to assert the right to data transferability.
In the event of an objection, APCOA Parking Holdings GmbH will no longer process the personal data unless we can prove compelling protection-worthy reasons for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing is used to assert, exercise or defend legal claims.
If APCOA Parking Holdings GmbH processes personal data in order to carry out direct advertising, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to APCOA Parking Holdings GmbH processing for direct marketing purposes, APCOA Parking Holdings GmbH GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right to object, for reasons arising from his particular situation, to the processing of personal data concerning him, which is carried out at APCOA Parking Holdings GmbH for scientific or historical research purposes or for statistical purposes in accordance with Article 89 para.1 of the GDPR, unless such processing is necessary for the fulfilment of a task in the public interest.
To exercise the right of objection, the data subject may directly contact any employee of APCOA Parking Holdings GmbH or any other employee. The data subject is also free to exercise his right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
Any data subject by the processing of personal data shall have the right which is granted by the European guideline and regulatory body, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on him/her or which significantly impairs him/her in a similar manner, provided that the decision is (1) not necessary for the conclusion or performance of a contract between the data subject and the data controller, or (2) by virtue of the European Union or national law, (2) by virtue of the law of the Member States to which the data subject is subjected, and that this legislation contains appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, or is (3) carried out with the express consent of the data subject.
If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the data controller, or (2) is made with the express consent of the person concerned, abcde gmbh shall take appropriate measures to protect the rights and freedoms and the legitimate interests of the data subject, including at least the right to have a person intervene from the side of the data controller, to state his or her position and to challenge the decision.
Every data subject affected by the processing of personal data has the right, granted by the European guideline and regulation provider, to revoke consent to the processing of personal data at any time.
The data controller collects and processes the personal data of applicants for the purpose of processing the application procedure. The processing may also be carried out electronically. This is particularly the case if an applicant sends the corresponding application documents to the data controller by electronic means, for example by e-mail or via a web form on the website. If the data controller concludes an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the data controller does not conclude an employment contract with the applicant, the application documents shall be automatically deleted two months after notification of the decision of refusal, provided that no other legitimate interests of the data controller stand in the way of deletion. Other legitimate interest in this sense, for example, are a burden of proof in proceedings under the General Equal Treatment Act (AGG).
Each time a user accesses one of the individual pages of this website which is operated by the data controller, on which a Facebook component (Facebook plug-in) is integrated, the Internet browser on the data subject's information technology system is automatically prompted by the respective Facebook component to download a version of the corresponding Facebook component from Facebook.
A complete overview of all Facebook plug-ins can be found at developers.facebook.com/docs/plugins/. As part of this technical process, Facebook is informed about which specific subpage of our website is visited by the data subject.
The data policy published by Facebook, which is available at de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains what settings Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress a data transmission to Facebook. Such applications can be used by the data subject to suppress data transfer to Facebook.
The data controller has integrated Google AdSense into this website. Google AdSense is an online service that enables you to advertise on third party sites. Google AdSense is based on an algorithm that selects the ads displayed on third party sites according to the content of the third party site. Google AdSense allows an interest-based targeting of the Internet user, which is realized by generating individual user profiles.
The Google AdSense component is operated by Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The data subject can prevent the setting of cookies by our website at any time, as already shown above, by means of a corresponding setting of the Internet browser used, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Alphabet Inc. from placing a cookie on the data subject's information technology system. In addition, a cookie already set by Alphabet Inc. can be deleted at any time via the Internet browser or other software programs.
Google AdSense also uses so-called counting pixels. A tracking pixel is a thumbnail graphic embedded in web pages to allow logging and a log file analysis, which enables the statistical evaluation. By means of the embedded pixel, Alphabet Inc. can recognize whether and when a website was opened by a data subject and which links were clicked on by the data subject. Counter pixels are used, among other things, to evaluate the flow of visitors to a website.
Google-AdSense is explained in more detail under this link www.google.de/intl/de/adsense/start/.
The data controller has integrated the Google Analytics component (with anonymisation function) into this website. Google Analytics is a web analytics service. Web analysis is the collection, aggregation and evaluation of data regarding the behaviour of visitors to websites. Among other things, a web analysis service collects data about the Internet page from which a data subject has accessed an Internet page (so-called referrer), which subpages of the Internet page were accessed or how often and for which length of time a subpage was viewed. A web analysis is mainly used for the optimization of a website, and the cost-benefit analysis of internet advertising.
The purpose of the Google Analytics component is to analyse visitor flows to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us that show the activities on our website and to provide other services related to the use of our website.
The data subject can prevent the setting of cookies by our website at any time, as already shown above, by means of a corresponding setting of the Internet browser used, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the data subject's information technology system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Each time you access one of the individual pages of this website, which is operated by the data controller and on which a Google+ button has been integrated, the Internet browser on the data subject's information technology system is automatically prompted by the respective Google+ button to download a version of the corresponding Google+ button from Google. As part of this technical process, Google is informed about which specific subpage of our website is visited by the data subject. More detailed information about Google+ is available at developers.google.com/+/.
If the data subject is logged on to Google+ at the same time, Google will recognize this with each access to our website by the data subject and during the entire duration of the respective stay on our website record which specific subpage of our website the data subject visits. This information is collected by the Google+ button and associated with the data subject's Google+ account.
The data subject can prevent the setting of cookies by our website at any time, as already shown above, by means of a corresponding setting of the Internet browser used, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the data subject's information technology system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
The data controller has integrated components of the Instagram service on this website. Instagram is a service that can be qualified as an audiovisual platform that allows users to share photos and videos and to redistribute such data on other social networks.
Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which an Instagram component (Insta button) has been integrated, the Internet browser on the person's information technology system is automatically prompted by the respective Instagram component to download a representation of the corresponding component of Instagram. As part of this technical process, Google is informed about which specific subpage of our website is visited by the data subject.
If the data subject is logged in to Instagram at the same time, Instagram will recognize which specific subpage the data subject visits during each visit to our website by the data subject, and for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned to the person's Instagram account by Instagram. If the data subject presses one of the Instagram buttons integrated on our website, the data and information will thus be transmitted and assigned to the personal Instagram user account of the person concerned and stored and processed by Instagram.
Instagram will receive information via the Instagram component that the data subject has visited our website whenever the data subject is logged in to Instagram at the same time as accessing our website, regardless of whether or not the data subject clicks on the Instagram component. If the data subject does not want such information to be transmitted to Instagram, he can prevent the transmission by logging out of their Instagram account before accessing our website.
The data controller has integrated components of LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that enables users to connect to existing business contacts and make new business contacts. More than 400 million registered users in more than 200 countries use LinkedIn. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world.
Each time our website is accessed and equipped with a LinkedIn component (LinkedIn plug-in), this component causes the browser used by the person concerned to download a corresponding representation of the LinkedIn component. Further information on the LinkedIn plug-ins can be found at developer.linkedin.com/plugins. As part of this technical process, LinkedIn will be informed about which specific subpage of our website is visited by the data subject.
If the data subject is logged on to LinkedIn at the same time, LinkedIn will recognize this with each access to our website by the data subject and during the entire duration of the respective stay on our website record which specific subpage of our website the data subject visits. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the person concerned. If the data subject clicks a LinkedIn button integrated on our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores this personal data.
LinkedIn receives information via the LinkedIn component that the data subject has visited our website whenever the data subject is logged in to LinkedIn at the same time as accessing our website; this happens regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject does not want such information to be transmitted to LinkedIn, he can prevent the transmission by logging out of their LinkedIn account before accessing our website.
The data controller has integrated components of Pinterest Inc. on this website. Pinterest is a so-called social network. A social network is a social meeting place operated on the Internet, an online community that usually enables users to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences, or enable the Internet community to provide personal or company information. Pinterest enables users of the social network to publish (the so-called pinning) image collections and single images as well as descriptions on virtual pinboards, which in turn can be shared (the so-called re-pinning) or commented by other users.
Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Pinterest component (Pinterest-Plug-In) has been integrated, the Internet browser on the person's information technology system is automatically prompted by the respective Pinterest component to download a representation of the corresponding component of Pinterest. More information about Pinterest is available at pinterest.com. As part of this technical process, Pinterest will be informed about which specific subpage of our website is visited by the data subject.
If the data subject is logged on to Pinterest at the same time, Pinterest will recognize this with each access to our website by the data subject and during the entire duration of the respective stay on our website record which specific subpage of our website the data subject visits. This information is collected by the Pinterest component and assigned by Pinterest to the respective Pinterest account of the data subject. If the data subject clicks a Pinterest button integrated on our website, Pinterest assigns this information to the personal Pinterest user account of the data subject and stores this personal data.
Pinterest receives information via the Pinterest component that the data subject has visited our website whenever the data subject is logged in to Pinterest at the same time as accessing our website, regardless of whether or not the data subject clicks on the Pinterest component. If such a transmission of this information to Pinterest is not desired by the data subject, he can prevent the transmission by logging out of their Pinterest account before accessing our website.
The data controller has integrated SlideShare components on this website. LinkedIn SlideShare is a file hosting service that allows you to exchange and archive presentations and other documents such as PDF files, videos and webinars. The file hosting service allows users to upload media content in all common formats, whereby the documents can either be made publicly accessible or marked with a private label.
LinkedIn SlideShare provides embed codes for the media content (presentations, PDF files, videos, photos, etc.) stored there. Embed codes are program codes that are embedded in Internet pages with the aim of displaying external content on the own Internet page. Embed codes make it possible to reproduce contents on an own website without storing them on the own server and possibly violate the reproduction rights of the respective author of the contents. Another advantage of using an embed code is that the respective operator of a website does not use his own storage space, and the own server is thus relieved. An embed code can be integrated at any point of another website, so that external content can also be inserted within the own text. The purpose of using LinkedIn SlideShare is to relieve our server, and thus avoid copyright infringements while simultaneously using external content.
Each time you visit our website, which is equipped with a SlideShare component (embed codes), this component will cause the browser you are using to download embedded data from SlideShare. As part of this technical process, LinkedIn will be informed about which specific subpage of our website is visited by the data subject.
If the data subject is simultaneously logged in to SlideShare, SlideShare recognizes which specific subpage the data subject visits with every visit to our website by the data subject and for the entire duration of the respective stay on our website. This information is collected by SlideShare and assigned to the respective SlideShare account of the person concerned by LinkedIn.
LinkedIn always receives information via the SlideShare component that the data subject has visited our website if the data subject is logged in to SlideShare at the same time as accessing our website. This will take place regardless of whether the data subject clicks on the integrated media data or not. If the data subject does not want such information to be transmitted to LinkedIn, he can prevent the transmission by logging out of their SlideShare account before accessing our website.
The data controller responsible for processing has integrated components of Twitter on this website. Twitter is a multilingual public microblogging service on which users can publish and distribute so-called tweets, i.e. short messages limited to 280 characters. These short messages are available to everyone, including people who are not registered on Twitter. The tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow a user's tweets. Furthermore, Twitter makes it possible to address a broad audience via hashtags, links or retweets.
Each time one of the individual pages of this website is called up, which is operated by the data controller for processing and on which a Twitter component (Twitter button) has been integrated, the Internet browser on the person's information technology system is automatically prompted by the respective Twitter component to download a representation of the corresponding Twitter component from Twitter. Further information on the Twitter buttons can be found at about.twitter.com/de/resources/buttons. As part of this technical process, LinkedIn will be informed about which specific subpage of our website is visited by the data subject. The purpose of integrating the Twitter component is to enable our users to disseminate the content of this website, to make this website known in the digital world and to increase our visitor numbers.
If the data subject is logged on to Twitter at the same time, Twitter will recognize this with each access to our website by the data subject and during the entire duration of the respective stay on our website record which specific subpage of our website the data subject visits. This information is collected by the Twitter component and assigned to the respective Twitter account of the person concerned by Twitter. If the data subject presses one of the Twitter buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Twitter user account of the data subject and stored and processed by Twitter.
Twitter receives information via the Twitter component that the data subject has visited our website whenever the data subject is logged on to Twitter at the same time as accessing our website; this happens regardless of whether the data subject clicks on the Twitter component or not. If such a transmission of this information to Twitter is not desired by the data subject, he can prevent the transmission by logging out of his Twitter account before calling up our website.
The current data protection regulations of Twitter are available at twitter.com/privacy.
The data controller has integrated components from Xing on this website. Xing is an Internet-based social network that enables users to connect to existing business contacts and make new business contacts. Individual users can create a personal profile of themselves at Xing. For example, companies can create company profiles or publish job offers on Xing.
Each time one of the individual pages of this website is called up, which is operated by the data controller and on which a Xing component (Xing plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing. More information about the Xing plug-ins can be found at dev.xing.com/plugins. As part of this technical process, Xing will be informed about which specific subpage of our website is visited by the data subject.
If the data subject is logged on to Twitter at the same time, Twitter will recognize this with each access to our website by the data subject and during the entire duration of the respective stay on our website record which specific subpage of our website the data subject visits. This information is collected by the Xing component and assigned to the respective Xing account of the data subject at Xing. If the data subject presses one of the Xing buttons integrated on our website, for example the "Share" button, Xing will assign this information to the personal Xing user account of the data subject and store this personal data.
Xing receives information via the Xing component that the data subject has visited our website whenever the data subject is logged in to Xing at the same time as accessing our website. This will happen regardless of whether the data subject clicks on the Xing component or not. If such a transmission of this information to Xing is not desired by the data subject, he can prevent the transmission by logging out of his Xing account before calling up our website.
The data protection regulations published by Xing, which can be accessed at www.xing.com/privacy, provide information on the collection, processing and use of personal data by Xing. Xing has also published privacy notices for the XING share button at www.xing.com/app/share.
The data controller has integrated components of YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips, and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, music videos, trailers or videos produced by users themselves can be called up via the Internet portal.
Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be found at www.youtube.com/yt/about/de/. In the course of this technical procedure, YouTube and Google are informed which specific subpage of our website is visited by the data subject.
If the data subject is logged on to YouTube at the same time, YouTube recognizes which specific subpage of our website the data subject visits by calling up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.
YouTube and Google receive information via the YouTube component that the data subject has visited our website whenever the data subject is logged on to YouTube at the same time as accessing our website; this happens regardless of whether the data subject clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desired by the data subject, he can prevent the transmission by logging out of the respective YouTube account before calling up our website.
The data controller responsible for processing has integrated a tracking pixel for the range analysis on this website. A tracking pixel is a thumbnail graphic embedded in a web page to allow logging and log file analysis for a statistical analysis. The integrated tracking pixels are used by INFOnline GmbH's Scalable Central Analysis Method (SZM).
The scalable central analysis method is used to determine statistical key figures, i.e. the range of coverage analysis. The embedded pixel-code shows whether, when and by how many users (including the data subject) have opened our website and what content has been accessed.
The data obtained by means of the scalable central analysis method is collected anonymously. For the purpose of recognizing the users of a website, a so-called session cookie is set, i.e. a signature is created which is composed of various automatically transmitted information, or which uses alternative methods. The IP address of the Internet connection used by the person concerned is only collected and processed in an anonymous form. The data subject is not identified at any time.
The data subject can prevent the setting of cookies by our website at any time, as already shown above, by means of a corresponding setting of the Internet browser used, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent INFOnline from placing a cookie on the data subject's information technology system. In addition, cookies already set by INFOnline can be deleted at any time via an Internet browser or other software programs.
Furthermore, the data subject has the option of objecting to and preventing INFOnline from recording data generated by INFOnline in connection with the use of this website, and the processing of such data by INFOnline. For this purpose, the data subject must press the Opt-Out button under the link http:// optout.ioam.de which sets an Opt-Out cookie. The opt-out cookie set with the objection, is stored on the information technology system used by the data subject. If cookies are deleted on the data subject's system after an objection has been raised, the data subject must call up the link again and set a new opt-out cookie.
When the opt-out cookie is set, it is possible that the website of the data controller may no longer be fully usable. INFOnline's current data protection regulations can be found at www.infonline.de/datenschutz/.
The data subject can prevent the setting of cookies by our website at any time, as already shown above, by means of a corresponding setting of the Internet browser used, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the data subject's information technology system. In addition, cookies already set by Google can be deleted at any time via an Internet browser or other software programs.
Art. 6 I lit. a GDPR serves our company as the legal foundation for processing operations during which we obtain the consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, during processing operations necessary for the delivery of goods or the provision of any other service or consideration, the processing shall be based on Art. 6 I lit. b of the GDPR. The same applies to such processing operations that are necessary for the execution of pre-contractual measures, for example, in cases of inquiries about our products or services. If our company is subject to a legal obligation through which a processing of personal data is required, such as the fulfilment of tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may be necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor of our company would become injured, and his or her name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. The processing would then be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be founded on Art. 6 I lit. f GDPR. Processing operations shall be based on this legal foundation if they are not covered by any of the aforementioned legal foundations, and if the processing is necessary to safeguard the legitimate interests of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not predominate. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, he was under the impression that a legitimate interest could be assumed if the data subject is a customer of the data controller (recital 47 sentence 2 GDPR).
If the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is to conduct our business activities for the benefit of the well-being of all our employees and our shareholders.
The criterion for the duration of the storage of personal data is the respective legal retention period. After expiry of this period, the relevant data will be deleted as a matter of routine, provided that it is no longer necessary for the fulfilment of the contract or the initiation of a contract.
We will inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). For a contract conclusion, it may be necessary for a data subject to provide us with personal data, which we must subsequently process. For example, the data subject is obliged to provide us with personal data when our company concludes a contract with him/her. Failure to provide personal data would mean that the contract with the data subject cannot be concluded. Prior to the provision of personal data by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is prescribed by law or contract, or whether it is necessary for the conclusion of a contract, or whether there is an obligation to provide the personal data, and what the consequences would be if the personal data was not made available.

References: Art. 17
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 9
 Art. 20

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6