Source: http://www.albrecht-engineers.com/en/impressum-disclaimer/data-protection/
Timestamp: 2019-04-25 15:54:29+00:00

Document:
Categories of data subjectsVisitors and users of the website (the data subjects are hereinafter referred to collectively as "users").
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. This term is extensive and comprises virtually any handling of data.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk in accordance with the statutory provisions and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.
These measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data as well as their access, input, disclosure, availability and separation. In addition, we have established procedures to ensure the exercise of data subjects' rights, erasure of data and response to any potential threats to data. Furthermore, we take the protection of personal data into account as early as during development and selection of hardware, software and processes, in accordance with the principle of data protection by design and by default.
Collaboration with processors, joint controllers and third partiesWhere we disclose data to other persons and companies (processors, joint controllers or third parties), transfer data to them or otherwise grant them access to data in the course of our processing activities, this is done solely based on a statutory permission (e.g. if transfer of data to third parties, such as payment service providers, is necessary for the performance of the contract), the users' consent, on account of a legal obligation or on grounds of our legitimate interests (e.g. when employing agents, web hosts, etc.).
Where we disclose data to other companies of our corporate group, transfer data to them or otherwise grant them access to data, this is done in particular for administrative purposes, as our legitimate interest, and based on the statutory provisions.
Where we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or this happens while using third-party services or disclosing/transferring data to other persons or companies, this is done solely to fulfil our (pre)contractual obligations, based on your consent, on account of a legal obligation or on grounds of our legitimate interests. Subject to express consent or transfer required by contract, we only process data or have data processed in third countries that offer an adequate level of data protection, which include U.S. processors certified under the "EU-US Privacy Shield", or based on appropriate safeguards, such as contractual obligation by so-called standard data protection clauses of the EU Commission, available certifications or binding corporate rules (Art. 44 to 49 GDPR, information website of the EU Commission).
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed and to obtain access to these data as well as further information and a copy of the data in accordance with the statutory provisions.
In accordance with the statutory provisions, you have the right to have incomplete personal data concerning you completed or to obtain the rectification of inaccurate personal data concerning you. In accordance with the statutory provisions, you have the right to obtain the erasure of personal data concerning you without undue delay or, alternatively, to obtain restriction of processing of the data. In accordance with the statutory provisions, you have the right to receive the personal data concerning you, which you have provided to us, and to request their transmission to another controller. In accordance with the statutory provisions, you have the right to lodge a complaint with the competent supervisory authority.
You have the right to withdraw any consent you have given with effect for the future.
You have the right to object at any time to the future processing of personal data concerning you in accordance with the statutory provisions. In particular, you have the right to object to the processing of personal data for direct marketing purposes.
"Cookies" are small files that are stored on the users' computers. Cookies can contain different types of information. A cookie is used primarily to store information about a user (or the device on which the cookie is stored) during or after the user's visit to a website. Temporary cookies or "session cookies" are cookies that are deleted after the user leaves the website and closes their browser. Such cookies can store, for example, the content of a shopping cart in an online shop or a login status. "Permanent" or "persistent" cookies are cookies that continue to be stored even after the browser is closed. For example, the login status can be saved if users visit the website again after several days. Such cookies can also store the users' interests, which are used for reach measurement or for marketing purposes. "Third-party cookies" are cookies that are offered by providers other than the controller operating the website (otherwise, if only the latter's cookies are concerned, they are referred to as "first-party cookies").
If the users do not wish cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The rejection of cookies may lead to functional limitations of this website.
We additionally process- Contract data (e.g. subject matter, term, customer category)- Payment data (e.g. bank details, payment history) of our customers, prospective customers and business partners for the purpose of providing contractual services, support and customer care, marketing, advertising and market research.
We process the data of our customers while providing our contractual services, which include conceptual and strategic consulting, campaign planning, software and design development, consulting or maintenance, implementation of campaigns and processes/ handling, server administration, data analysis/ consulting services and training services.In this case, we process inventory data (e.g. customer master data, such as names or addresses), contact data (e.g. email, telephone numbers), content data (e.g. text inputs, photographs, videos), contract data (e.g. subject matter, term), payment data (e.g. bank details, payment history), usage data and metadata (e.g. for the evaluation and success measurement of marketing measures). As a rule, we do not process special categories of personal data, unless they are part of processing carried out on behalf of a controller. The data subjects include our customers, prospective customers as well as their customers, users, website visitors or employees as well as third parties. The purpose of the processing is the provision of contractual services, billing and our customer service. The legal basis for processing is stipulated in point (b) of Art. 6 (1) GDPR (contractual services) and point (f) of Art. 6 (1) GDPR (analysis, statistical evaluation, optimisation, security measures). We process data that are necessary for the establishment and performance of the contractual services and point out the necessity of their provision. The data are only disclosed to external parties to the extent necessary for the execution of an order. While processing the data provided to us as part of an order, we act in compliance with the client's instructions as well as the statutory provisions on processing carried out on behalf of a controller pursuant to Art. 28 GDPR and do not process the data for any purposes other than the purposes of the order.We will erase the data after expiry of the statutory warranty and comparable obligations. The necessity of retaining the data is checked every three years; if there are statutory archiving obligations, we will erase the data after their expiry (6 years pursuant to Sec. 257 (1) HGB [German Commercial Code], 10 years pursuant to Sec. 147 (1) AO [Fiscal Code of Germany]). Data disclosed to us by the customer as part of an order will be erased as specified in the order, generally after completion of the order.
We process data for the purpose of administrative tasks and organisation of our operations, financial accounting and compliance with statutory obligations, such as archiving. In this case, we process the same data as we process while providing our contractual services. The legal basis for such processing is point (c) of Art. 6 (1) GDPR and point (f) of Art. 6 (1) GDPR. The data subjects include customers, prospective customers, business partners and website visitors. The purpose and our interest in the processing consists in administration, financial accounting, office organisation and archiving, i.e. tasks that serve to maintain our operations, perform our tasks and provide our services. The erasure of the data with regard to contractual services and contractual communication corresponds to the information provided in these processing activities.In this case, we disclose or transfer data to the fiscal authorities, consultants, such as tax advisors or auditors, as well as to other billing centres and payment service providers.Furthermore, we store information on suppliers, event organisers and other business partners on grounds of our business interests, for example for the purpose of contacting them at a later point. As a rule, we store these mainly company-related data permanently.
During the application process, we offer the applicants the opportunity to be included in our "talent pool" for a period of two years based on consent within the meaning of point (a) of Art. 6 (1) and Art. 7 GDPR. The application documents in the talent pool will only be processed during future job advertisements and the recruitment of employees and will be destroyed after expiry of the period at the latest. The applicants will be informed that their consent to inclusion in the talent pool is voluntary, has no influence on the ongoing application process and that they can withdraw this consent at any time with effect for the future and raise an objection within the meaning of Art. 21 GDPR.
We use server monitoring & error tracking to ensure the availability and integrity of our website and use the data processed for the technical optimisation of our website. For these purposes, we use the service New Relic, Inc. Attn: Legal Department 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA. New Relic is certified under the Privacy Shield Agreement, which guarantees compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000TNPiAAO&status=Active).
New Relic processes aggregated performance data, i.e. performance, utilisation and comparable technical values which provide information about the stability and any abnormalities of our website. In the event of any errors and abnormalities, individual enquiries of the users of our website are recorded in pseudonymised form to identify and eliminate problem sources. In this case, pseudonymised means, in particular, that the users' IP addresses are shortened by the last two digits (referred to as IP masking). The aggregated data will be erased after three months, the pseudonymised data after seven days. We use New Relic on grounds of our legitimate interests in the security, error-free operation and optimisation of our website in accordance with point (f) of Art. 6 (1) GDPR.

References: Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 21
 Art. 6