Data Protection

Generally, we collect data like any other website. Every time you make a request to our site, your browser transmits "meta-data," which we use to respond to your request.

We also aim to protect our site and infrastructure from excessive or unwanted access, which necessitates temporarily storing and automatically analyzing some of this metadata. For this purpose, we use tools like reCAPTCHA, which is loaded upon visiting our site and evaluates your interactions during your visit to determine whether you are a bot or a human.

To improve the content of our site and understand what interests the people who visit our site, we use common tracking tools such as Google Analytics and Mouseflow.

Both are service providers that collect and aggregate data about interactions on our site. Unfortunately, this requires the transmission of your data to these service providers. This includes data such as:

• What was clicked on

• How long the user stays on our site

• Which pages were visited

• How exactly our site is used
  

Generally, we have no commercial interest in your personal data (we do not want to make money from it) and always try, whenever there is no necessity for certain data from you, not to store or share it at all.

If this information is not sufficient for you, you can find the official version of our privacy policy right below, ensuring that we comply with GDPR.

To facilitate the readability and understanding of this Privacy Policy, we will refer to "We," "Us," or "Our" in the following text. This refers to our website and/or us as the responsible contacts.

The information provided here aims to give you a simple overview of what happens to your personal data when you visit our website. Personal data includes all data that can be used to personally identify you. Our website uses cookies and similar technologies to enhance the user experience and provide certain functionalities. For more information, please refer to the "Cookies" section of this Privacy Policy.

Your data is primarily collected only when you actively provide it to us.

An exception is the data that is automatically collected by our IT infrastructure when you visit the website. This includes technical data (e.g., internet browser, operating system, or the time of the page request) needed to respond to your request. This data is collected automatically as soon as you access or visit this website.

Another exception is the use of reCAPTCHA, which collects information during your visit to our website to assess whether you are a bot or a human. For more information, please refer to this link.

Some of the data is collected to ensure the error-free provision of the website. Other data is collected to protect our systems from unauthorized or excessive access. Additionally, we use data to improve marketing measures and optimize the user experience.

Other data is collected to protect our systems and infrastructure from unauthorized or excessive access. Furthermore, we process your data (if necessary) to fulfill legal obligations based on Art. 6(1)(c) GDPR .

You have the right to obtain, at any time and free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.

If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. Additionally, you have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. For this and any other questions regarding data protection, you can contact us at any time.

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy. When you use our website, various personal data are collected. Personal data are data that can be used to personally identify you. This Privacy Policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g., communication by email) can have security vulnerabilities. A complete protection of the data from access by third parties is not possible.

Unless a more specific retention period is stated within this Privacy Policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the data will be deleted once these reasons no longer apply.

If you have consented to the data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data as per Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), the data processing is additionally based on § 25(1) TTDSG. Consent can be revoked at any time.

If your data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Art. 6(1)(c) GDPR. Data processing can also be based on our legitimate interest according to Art. 6(1)(f) GDPR. The specific legal basis applicable in each individual case is provided in the following sections of this Privacy Policy.

As part of our business activities, we work with various external parties. This occasionally requires the transfer of personal data to these external parties. We only share personal data with external parties if it is necessary for contract fulfillment, if we are legally obligated to do so (e.g., sharing data with tax authorities), if we have a legitimate interest under Art. 6(1)(f) GDPR in sharing the data, or if another legal basis permits the data transfer. When using processors, we only transfer personal data of our customers based on a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

You have the right to receive personal data that we process based on your consent or in fulfillment of a contract in a structured, commonly used, and machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.

You have the right, in accordance with applicable legal provisions, to obtain free-of-charge information about your stored personal data, its origin, recipients, and the purpose of data processing, and, if applicable, the right to rectify or erase this data. For this and any further questions regarding personal data, you can contact us at any time.

You have the right to request the restriction of processing of your personal data. You can contact us at any time to exercise this right. The right to restriction of processing applies in the following cases:

• If you contest the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of processing of your personal data.

• If the processing of your personal data was/is unlawful, but you oppose the erasure of the data and instead request the restriction of its use.

• If we no longer need your personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing instead of erasure.

• If you have objected to processing pursuant to Article 21(1) GDPR, pending the verification whether our legitimate grounds override yours, you have the right to request the restriction of processing of your personal data.

When processing of your personal data is restricted, except for storage, we may only process your data with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our site uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the address line of the browser from "http://" to "https://" and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

We automatically collect and store information in so-called server log files that your browser automatically transmits to us. These are:

• Browser type and browser version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Time of the server request

• IP address

These data are not merged with other data sources. The collection of these data is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and optimization of our website – for this purpose, server log files must be collected.

When you contact us via contact form, email, or phone, your inquiry including all resulting personal data (such as name, contact details) will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

Depending on the nature of your inquiry, the legal basis for this processing is Article 6(1)(b) GDPR for inquiries related to a contract or pre-contractual measures initiated by you, or Article 6(1)(f) GDPR if your inquiry is of another nature. If personal data are requested that are not necessary for the fulfillment of a contract or to safeguard legitimate interests, the transmission to us is based on your consent given in accordance with Article 6(1)(a) GDPR.

Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory legal provisions – especially retention periods – remain unaffected.

Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our services more user-friendly, effective, and secure.

Some cookies are "session cookies." Such cookies are automatically deleted after your browser session ends. Other cookies remain on your device until you delete them yourself. These cookies help us recognize you when you return to our website.

With a modern web browser, you can monitor, restrict, or prevent the setting of cookies. Many web browsers can be configured to automatically delete cookies when the program is closed. Disabling cookies may result in limited functionality of our website.

The setting of cookies necessary for electronic communication processes or the provision of certain functions you desire is based on Art. 6(1)(f) GDPR. As the operator of this website, we have a legitimate interest in storing cookies for the technically error-free and smooth delivery of our services. If other cookies are set (e.g., for analytics purposes), they will be addressed separately in this Privacy Policy.

We use Google Analytics and Google Tag Manager by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, for statistical evaluation and management of website tags.

Type and Scope of Processing: Google Analytics analyzes user behavior and generates reports on website activity. This includes the number of visits, pages visited, and the duration of visits. Google Analytics uses cookies and other browser technologies to analyze user behavior and recognize users. This information is used, among other things, to compile reports on website activity. Google Tag Manager is used to manage website tags via an interface, allowing us to control the precise integration of services on our website. This enables us to flexibly integrate additional services to evaluate user access to our website. Both services use cookies and other technologies for data collection.

Purpose and Legal Basis: The use of these services is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG. We transfer personal data to the USA, with the transfer being based on the European Commission's adequacy decision (Art. 45(1) GDPR). The involved US companies are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Retention Period: The specific retention period of the processed data is determined by Google Ireland Limited and is beyond our influence. For more information, please refer to the privacy policies of Google Analytics and Google Tag Manager .

You can prevent Google from collecting and processing your data by downloading and installing the browser add-on to disable Google Analytics. For more information, click here

We use Mouseflow, a web analytics tool by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to randomly record individual visits (only with anonymized IP addresses). A log of mouse movements and clicks is created with the intention of recording randomly selected individual visits to identify possible improvements to our website. The information generated by Mouseflow is transmitted to a server in the EU and stored there. This information is not personally identifiable and is not shared with third parties. If you do not wish this, you can opt-out on all websites that use Mouseflow by clicking here .

Our website is hosted externally. The personal data collected on our website are stored on the servers of our hosting provider. This may include IP addresses, metadata, communication data, website access data, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Our hosting provider will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.

We use the following hosting provider:

creoline GmbH
Bergstraße 9a
48341 Altenberge
Germany

Website: https://www.creoline.com/de