1. Personal data
Personal data is information about your identity. This includes, but is not limited to information such as name, address, telephone number, e-mail address. It is not necessary for you to disclose personal data in order to use our website. However, in certain cases we will need your name and address as well as other information to provide the requested services, e.g. the sending of information material or the answering of individual questions. Furthermore, we only store and process data that you provide us voluntarily and, if applicable, data that we collect automatically when you visit our Internet pages (e.g. your IP address and the names of the pages you call up, the browser you use and your operating system, date and time of access, search engines used, names of downloaded files). If you make use of our services, we only collect data necessary to provide the services. If we ask you for further data, this is provided on a voluntary basis to provide the requested service and to protect our own legitimate business interests.
2. Purpose of processing your data
3. Intended use
We will collect, process and use the personal data you provide online only for the purposes communicated to you. Your personal data will not be passed on to third parties without your express consent. The collection of personal data and its transmission to state institutions and authorities entitled to receive information will only take place within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees and the service companies commissioned by us are obliged by us to maintain secrecy and to comply with all relevant data protection regulations.
4. Data that is collected when you visit our Internet pages
When you use our Internet pages, information is automatically sent to the server of our website by the browser used on your terminal device. This information is temporarily stored in log files. The following information is recorded without your intervention and stored until it is automatically deleted:
• the address of the page of our website that you have called up;
• the address of the website that you visited immediately before (the so-called "referrer");
• IP address of your terminal device;
• Date and time of your call;
• Transfer status (file transferred, file not found, etc.);
• Properties of your end device, especially the operating system, the browser used and the window size of your browser.
We use these log files to detect, eliminate or prevent possible disturbances or attacks on our website. At the latest after 24 hours the data stored in the log files will be deleted or made anonymous. The legal basis for this is Art. 6 para. 1 f) of GDPR (balancing of interests, based on our legitimate interest in ensuring the technical functionality of our website).
If the opportunity for the input of personal or business data (email addresses, name, and addresses) is given, this is provided voluntarily. Your data will be treated with confidentially and will only be used to process your enquiry, it will not be passed to third parties. The legal basis for this is Art. 6 para. 1 a) of GDPR in conjunction with your consent given when you send the contact form. You can revoke this consent at any time. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. There is no link to the above-mentioned access data in log files. After the enquiry has been processed by us, the data will first be stored in case of additional questions. Deletion of the data can be requested at any time, otherwise the data will be deleted after the matter has been completely settled. The statutory retention period of six years for commercial and business correspondence remains unaffected in each case, Art. 6 para. 1 c) of GDPR.
In addition we use your personal data to comply with legal obligations (for example for safety incident reporting obligations, manage your request to exercise rights) or order from competent Authority. The legal basis of the processing is the need to fulfil a legal obligation.
5. Children and young people
Persons under the age of 16 years should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect such data and do not pass it on to third parties. Parents or guardians are responsible for protecting the privacy of their children. Parents and guardians are requested to talk to their children about the safe and responsible use of their personal data on the Internet.
6. Safety and personal data recipients
We have taken technical and organisational security measures to protect your personal data from loss, destruction, manipulation and unauthorised access. All our employees and all persons involved in data processing are obliged to comply with the laws relevant to data protection and to handle personal data confidentially. If personal data is collected and processed, the information is transmitted in encrypted form to prevent misuse of the data by third parties. Our security measures are continuously revised in line with technological developments.
Your personal data may also be shared with some companies of our group for the performance of IT services and logistic support, in their role of data processors. Where strictly necessary your personal data may also be disclosed to independent data controllers, such as the competent authority. In case of extraordinary corporate transaction (e.g. transfer or lease company, merger, etc.) the data may be transferred or given to third parties purchasers/tenants or assignees. The list of the recipients of the processing is available by writing to our contact address in the section “Contact for questions” below.
7. Social media channels
On our website you will find links to social networks. You can recognise these links by the logos of the respective providers. Clicking on the links will redirect you to the corresponding social media sites.
Before calling up the corresponding links, no personal information is transmitted to the respective providers. The call of the linked page is also the basis for data processing by the respective provider for their own purposes. When linking to the website of a third party provider, they should always inform you of their data protection conditions. We may also collect your personal data as you interact with the social network pages used by us. Some information is provided to us directly by you when you decide to share, via your profile, images published on our social medial pages, comment on our posts and/or show your appreciation for one of our products or services or events, by pressing the specific button, as well as when you decide to send a message to us using the private chat feature or other channels made available on the various social network.
8. Cookies and similar technologies
8.1. Essential cookies and website functions
These cookies and technologies are necessary for the functioning of the website and cannot be deactivated in our systems. You can set your browser to block these cookies or to notify you about these cookies. However, some areas of the website will then not function. The absolutely necessary cookies have a storage period of up to one year.
8.1.1. Consent management
Among the technologies that are strictly necessary is a tool used to manage your eventual consent to website features and/or analysis services on our website, the "Privacy Preference Center".
The cookies used in connection with this tool have a storage period of up to 1 year.
8.1.2. Data transmission to the USA
Google operates its servers for Google reCAPTCHA and Google Fonts in the USA, i.e. in a third country outside the EU. The services of Google transmit your data to these servers. Currently there is no EU Commission decision that the USA generally offers an adequate level of protection. However, Google has already declared that it will rely on Standard Contractual Clauses (or the so-called “SCCs”) to ensure compliance with rules regarding data transfers to the US. Additional to the SCCs, the company has to provide additional guarantees by adhering and following the continuous guidance offered by the European Data Protection Board.
8.1.3. Legal basis
The legal basis for the processing of your data in connection with these absolutely necessary cookies is Art 6 Paragraph 1 f) of GDPR (balancing of interests, based on our legitimate interest in the technically smooth provision of our website and the services offered via it).
8.2. Website functions
By integrating these online services and cookies, the website is able to provide extended functionality and personalised content, e.g. the integration of videos or easier "sharing" in social media. If you do not allow this, some or all of our services may not function properly.
We use Wistia for the integration of videos within the website. Vimeo is operated by Wistia Inc, 120 Brookline Street, Cambridge, Massachusetts, 02139 USA ("Wistia").
If you have given your consent, your browser communicates directly with a Wistia server when you call up a page with integrated Wistia video, which can then record the corresponding content retrieval by your browser. Wistia is responsible for processing the data collected in this process. If you are logged into your Wistia account when you access the site, you allow Wistia to assign your visit to our site directly to your personal profile at Wistia. You can prevent this by first logging out of your Wistia account. The local storage used by Wistia is persistent. Logs of unknown users of the Websites are retained at Wistia for 30 days before deletion. b. Logs of known users of the Websites are retained while Wistia has reason to believe that particular user may return to use the Websites.
8.2.2. Data transmission to the USA
The services required for these website functions transmit data about your use of this website to the USA. Currently there is no EU Commission decision that the USA offers an adequate level of data protection. There are also no other appropriate guarantees, enforceable rights or effective remedies to protect your data in the USA. Therefore, there is a risk that the US Service providers will not provide data will the same level of protection as it receives within the European Union. The activation of the services and the associated transfer of your data to the USA will only take place on the basis of your expressly declared consent. Please keep in mind that some of the service providers will rely on Standard Contractual Clauses (or the so-called “SCCs”) to ensure compliance with rules regarding data transfers to the US. Additional to the SCCs, the service providers will have to provide additional guarantees by adhering and following the continuous guidance offered by the European Data Protection Board.
8.2.2. Legal basis
The legal basis for the processing of your data in connection with these website functions is your consent (Art. 6 para. 1 a) of GDPR). You can revoke this consent at any time in the cookie settings. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
8.3. Marketing purposes
The providers of these online services use in particular the following data for the marketing purposes mentioned:
• The address of the page of our website you are visiting;
• the address of the website that you visited immediately before (the so-called "referrer")
• IP address of your terminal device;
• information about your location derived from the IP address;
• Date and time of your call;
• Transfer status (file transferred, file not found, etc.),
• Properties of your end device, especially the operating system, the browser used and the window size of your browser;
The respective service providers may combine this information with other data that you have provided to them or that they have collected as part of your use of other services.
8.3.1. Google Analytics and Google Tag Manager
For marketing purposes we use the products "Google Analytics" and "Google Tag Manager" of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
The purpose of these tracking services is to analyse the usage behaviour of visitors to our website. Based on these analytics, we can place additional targeted advertisements in Google's advertising network to reach potential customers and/or employees for our company. Google processes some of the data collected in this process on our behalf as well as for their own purposes.
The cookies used in this context have a storage period of up to 2 years. As far as Google saves the collected data within the scope of order processing, the storage period of these data is limited to a maximum of 14 months. If Google stores the data on its own responsibility, the storage period may be longer.
8.3.2. Data transmission to the USA
The services required for these marketing purposes transmit data about your use of this website to the USA. Currently there is no EU Commission decision that the USA offers an adequate level of data protection. There are also no other appropriate guarantees, enforceable rights or effective remedies to protect your data in the USA. Therefore, there is a risk that the US Service providers will not provide data will the same level of protection as it receives within the European Union. . The activation of the services and the associated transfer of your data to the USA will only take place on the basis of your expressly declared consent. Please keep in mind that some of the service providers will rely on Standard Contractual Clauses (or the so-called “SCCs”) to ensure compliance with rules regarding data transfers to the US. Additional to the SCCs, the service providers will have to provide additional guarantees by adhering and following the continuous guidance offered by the European Data Protection Board.
8.3.3. Legal basis
The legal basis for the processing of your data in connection with these marketing purposes is your consent (Art. 6 para. 1 a) of GDPR). You can revoke this consent at any time in the cookie settings. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
9. Changes to this policy
We reserve the right to change our security and data protection measures if this becomes necessary due to technical developments. In these cases, we will also adapt our data protection information accordingly. Therefore, please note the current version of our data protection declaration. We will communicate any changes to you, where we are required to do so.
10. Right to object
If you think it is justified by a good reason, in certain circumstances you have the right to object to the processing of your Personal data, if the legal requirements are met. To declare your objection, you can contact us by e-mail at: email@example.com
11. Your other rights
On request, we will inform you whether and, if so, which data about you have been stored. If the legal requirements are met, you have the right to correct, restrict the processing or delete this data and to access to your personal data or ask for a copy.
You also have the right to receive the data concerning you that you have provided us with in a structured, common and machine-readable format. You may transmit this data or have it transmitted to other entities. You also have the right to withdraw consent, when given, at any time and without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal.
You also have a right of appeal to a supervisory authority for data protection responsible for where you live, work or where an alleged infringement has occurred. We inform you that request of deletion of data are subject to current legal requirements to retain documents imposed on us by laws and regulations, if applicable. You can exercise your rights at any time sending an email to address mentioned above.
12. Data controller, Data protection Officer, Contact for questions, suggestions or complaints
To exercise your rights, you must contact the Data Protection Officer in writing, including a copy an identification document, at any of the following addresses:
• Postal address: Camino Fuente de la Mora 1, 28050 Madrid, Spain.
• E-mail: firstname.lastname@example.org
Last update: 11.05.2022