Website visit

A) Purpose of the processing

We create the content of our websites with Storyblok, host them with AWS and deliver them with the help of Cloudflare's CDN. Usage data is collected in the process. The temporary storage of the data is necessary for the course of a website visit to enable delivery of the website. Further storage in log files takes place to ensure the functionality of the website and the security of the information technology systems.

B) Scope of the processing

We may collect, store and process the following categories of personal data when you use the website for information purposes or access its content:

• Date and time of access

• IP address

• Host name of the accessing computer

• Website from which the website was accessed

• Websites accessed via the website

• Visited page on our website

• Protocols and status code

• Amount of data transferred

• Information about the browser type and version used

• Operating system

• UserAgent

• Protocol data (directory protection user, referrer, host name accessed)

The IP addresses are stored anonymously. All user data is removed during anonymization.

C) Legal basis

The data is processed on the basis of Article 6(1)(f) GDPR (legitimate interest).

D) Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The anonymized IP addresses are stored for 60 days. Information on the directory protection user used is anonymized after one day. Error logs, which record incorrect page views, are deleted after seven days. Access via FTP is logged with anonymized information on the user name and IP address and stored for 60 days.

E) Recipients of the data

We use various services to provide the websites, which are therefore recipients of the data.

Amazon Web Services (AWS)
We use Amazon Web Services (AWS) as the hosting provider for our websites.

• Registered office: Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855, Luxembourg

• Website: https://aws.amazon.com/

• Data protection information: https://aws.amazon.com/privacy/

• Information on compliance with the GDPR: https://aws.amazon.com/compliance/gdpr-center/

Cloudflare
We use Cloudflare's global cloud platform as a Cloud Delivery Network (CDN) and Web Application Firewall (WAF). This makes the website more secure while improving the performance and reliability of its critical internet properties.

• Registered office: Cloudflare Inc, 101 Townsend St San Francisco, CA, 94107, USA

• Data protection information: https://www.cloudflare.com/privacypolicy/

• Cookie information: https://www.cloudflare.com/cookie-policy/

Storyblok
We use the SaaS-based Storyblok and its affiliates' SaaS-based headless content management system (including the Storyblok APIs and documentation) and the Digital Experience Platform (DXP) with a visual editor to upload, manage and publish content using the Storyblok APIs.

• Registered office: Storyblok Solutions GmbH, FN 608512x, ATU79663909, Loquaiplatz 12/1, 1060 Vienna, Austria

• Data protection information: https://www.storyblok.com/legal/privacy-policy

A) Purpose of the processing

We use the consent management tool from OneTrust to manage your consent to the processing of personal data on our website. The consent management tool is used for the purpose of:

• Managing and documenting your consent to data processing

• Compliance with the legal requirements of the General Data Protection Regulation (GDPR)

• Ensuring transparent and comprehensible data processing

• Optimizing the user experience on our website

B) Scope of the processing

The following data is processed:

• Information on consent (yes/no)

• Time of the consent

• IP address

• Browser information

• Device information

• Websites visited

C) Legal basis

We process this data on the basis of Article 6(1)(f) GDPR (legitimate interest).

D) Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

E) Recipients of the data

The data collected is passed on to our service provider OneTrust, which supports us in managing the consents. OneTrust receives the above-mentioned data as a processor.

• Registered office: OneTrust LLC1200 Abernathy Rd, Suite 600, Atlanta, Georgia 30328, USA

• Website: https://www.onetrust.com

• Data protection information: https://www.onetrust.com/privacy-notice/

A) Purpose of the processing

The purpose of the processing is to enable you to contact us if you have any questions about our products and services so that we can provide you with assistance if necessary and make you offers for our products.

B) Scope of the processing

When you use the contact form, the categories of data transmitted are processed:

• Personal & contact data

• Address data

• order & product data, if applicable

• and the time of transmission

• as well as any voluntarily provided data on location and telephone data

C) Legal basis

We process this data on the basis of Article 6(1)(b) to initiate or fulfill a contract.

D) Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the contact form, this is usually the case after it has been sent to us. However, it may be stored for up to ten years due to legal obligations. As a rule, the storage period is three years.

The mail logs for sending e-mails from the web environment are anonymized after one day and then stored for 60 days. Mail logs for sending via our mail server are deleted after four weeks. The retention period is necessary to ensure the functionality of the mail services and to combat spam.

E) Recipients of the data

Cloudflare Turnstile
Mechanisms are integrated into the forms on the website to prevent us from receiving spam requests. We use the Turnstile service from the provider Cloudflare for this purpose. The spam protection is either visible as a captcha or happens in the background without user interaction. Turnstile receives the above-mentioned data as a processor.

• Registered office: Cloudflare, Inc. 101 Townsend St, San Francisco, CA 94107, USA

• Website: https://www.cloudflare.com/application-services/products/turnstile/

• Data protection information: https://www.cloudflare.com/privacypolicy/

Sendgrid
Incoming contact form inquiries are sent to us by email. We use the Sendgrid service from the provider Twilio to send the emails. Sendgrid receives the above-mentioned data as a processor.

• Registered office: Twilio Ireland Limited, 70 Sir John Rogerson's Quay, Dublin 2, D02 R296, Ireland

• Website: https://sendgrid.com/en-us

• Data protection information: https://www.twilio.com/en-us/legal/privacy

A) Purpose of the processing

We offer the subscription to our newsletter. The purpose of the processing is to send you the newsletter and to inform you about current products, services and promotions.

B) Scope of the processing

When you subscribe to our newsletter, we process the following newsletter data

• IP address (shortened - a personal reference can be established)

• Page from which the page was requested (so-called referrer URL)

• Date and time of access

• Information about the browser type and version used

• Your name

• E-mail address

• Date and time of registration and confirmation

When sending the newsletter, we evaluate your usage behavior. For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the above-mentioned data and the web beacons with your e-mail address and an individual ID. Links contained in the newsletter also contain this ID. We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them and deduce your personal interests from this.

C) Legal basis

The data is processed on the basis of Article 6(1)(a) GDPR (consent). When you register for our newsletter, you consent to the processing of your personal data. We use the so-called double opt-in procedure for this. This means that after you have registered, we will send you an email to the email address you have provided in which we ask you to confirm that you wish to receive the newsletter.

D) Revocation

You can object to receiving the newsletter at any time by clicking on the separate unsubscribe link provided in every email or by informing us via another contact channel. Tracking is also not possible if you have deactivated the display of images in your e-mail program by default. In this case, the newsletter will not be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

E) Storage period

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the newsletter, this is the case when you unsubscribe from the newsletter. The information is stored for as long as you have subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously. The data may be stored for up to three years after unsubscribing due to the obligation to provide evidence.

F) Recipients of the data

The Maileon tool from xQueue is used to process the newsletter mailing. XQueue GmbH receives the above-mentioned data as a processor.

• Registered office: XQueue GmbH, Christian-Pless-Str. 11-13, 63069 Offenbach, Germany

• Website: https://maileon.com

• Data protection information: https://maileon.com/privacy-policy

A) Purpose of the processing

We use a chatbot from the service provider Chatbase on our website to respond to visitor enquiries automatically and efficiently. The aim is to improve user communication, quickly clarify frequently asked questions and optimise support processes.

B) Scope of the processing

When using the chatbot, the content you enter (e.g. questions, concerns, search queries, reactions), usage data and technical data such as your IP address and the time of interaction are transmitted to the Chatbase servers. All data is anonymised and encrypted. Conversations with the chatbot are stored and analysed to improve the functionality of the chatbot. A link to other personal data is only made if you actively enter it (e.g. name, email address in the chat history). We recommend that you do not enter any data in the chat window that could reveal your identity.

C) Legal basis

We process this data on the basis of Article 6 (1)(f) GDPR (legitimate interest).

D) Storage period

The storage period for chat histories depends on the settings we have specified in the Chatbase dashboard. Personal data is deleted as soon as it is no longer required for the purpose for which it was collected. For further details on storage by Chatbase, please refer to their privacy policy.

E) Recipients of the data

The chatbot is provided and managed by the provider Chatbase. Chatbase receives the above-mentioned data as a processor.

• Registered office: Chatbase.co, Inc., 4700 Keele Street, 215 Bergeron Centre, Toronto, ON, Canada, M3J 1P3

• Website: https://www.chatbase.co/

• Data protection information: https://www.chatbase.co/legal/privacy

A) Purpose of the processing

On our website, we sometimes embed videos from the YouTube service in order to make our content clearer and to provide you with additional information in audiovisual form. This serves to improve the user experience and the attractive presentation of our online offering. Another part of the videos is provided directly by our website without third-party providers.

B) Scope of the processing

When you visit a page with an embedded YouTube video, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. Technical information such as the screen resolution, the browser used or the operating system may also be transmitted. If you are logged into your YouTube or Google account, YouTube can assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube or Google account before visiting our website. The integration usually takes place in extended data protection mode, which, according to YouTube, means that no cookies are initially set to analyze usage behavior - unless you actively watch the video.

C) Legal basis

The processing is based on your consent in accordance with Article 6(1)(a) GDPR, provided that you have consented to this via our consent management. No YouTube video will be loaded without your consent. Consent is given either via the consent banner, the cookie settings or directly by clicking on a YouTube video.

D) Revocation

You can revoke your consent at any time with future effect by accessing the cookie settings and changing your selection there. Further information on revoking and preventing the setting of cookies can be found in the Cookie Policy.

E) Storage period

The specific storage duration of the data processed by YouTube is the responsibility of YouTube or Google. We have no influence on the duration of storage. Further information can be found in Google's privacy policy.

F) Recipients of the data

The recipient of the data is Google Ireland Limited and, if applicable, Google LLC in the USA. Google also processes your data in the USA. For data transfer to third countries, Google relies on standard contractual clauses in accordance with Art. 46 GDPR.

• Registered office: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

• Website: https://www.youtube.com/

• Data protection information: https://policies.google.com/privacy?hl=de

A) Purpose of the processing

We use the map service Google Maps to provide you with an interactive map and to enable you to use the map function conveniently. This makes it easier to find our locations and the locations of our partner companies.

B) Scope of the processing

When you access a sub-page in which Google Maps is integrated, information about your use of our website (e.g. your IP address) is transmitted to Google servers and stored there. Google may use this data to create user profiles.

C) Legal basis

The use of Google Maps is based on your consent in accordance with Article 6(1)(a) GDPR, provided that you have consented to this via our consent management. Google Maps will not be loaded without your consent. Consent is given either via the consent banner, the cookie settings or directly by clicking within the location finder.

D) Revocation

You can revoke your consent at any time with future effect by accessing the cookie settings and changing your selection there. Further information on revoking and preventing the setting of cookies can be found in the Cookie Policy.

E) Storage period

The specific storage duration of the data processed by YouTube is the responsibility of YouTube or Google. We have no influence on the duration of storage. Further information can be found in Google's privacy policy.

F) Recipients of the data

The recipient of the data is Google Ireland Limited and, if applicable, Google LLC in the USA. Google also processes your data in the USA. For data transfer to third countries, Google relies on standard contractual clauses in accordance with Article 46 GDPR.

• Registered office: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

• Website: https://www.youtube.com/

• Data protection information: https://policies.google.com/privacy?hl=de