Data protection

Data protection is of a particularly high priority for the management of the Hermann Pipersberg jr. Ltd.

The use of our company’s website is generally possible without providing any “personal data”. If a data subject wishes to avail himself of special enterprise services via the Hermann Pipersberg jr. GmbH via our website, it may be necessary to process so-called “personal data”. The Hermann Pipersberg jr. GmbH processes the personal data of website visitors only to the extent necessary to provide a functional website and our content and services. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject. The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the Hermann Pipersberg jr. GmbH is subject to country-specific data protection standards. By means of this data protection declaration, the Hermann Pipersberg jr. GmbH informs and educates the public about the nature, scope and purpose of the personal data collected, used and processed by our company. In addition, data subjects are informed of their rights by this privacy policy. The Hermann Pipersberg jr. GmbH, as the controller, has implemented numerous technical and organizational measures to ensure and guarantee the most complete protection of personal data processed through this website. Nevertheless, we, the Hermann Pipersberg jr. GmbH, would like to point out that Internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. Therefore, every data subject is free to transfer personal data to the Hermann Pipersberg jr. GmbH must be transmitted.

At this point, special reference is already made to the data subject’s right to object to the processing of data concerning them on the basis of Article 6 (1)(e) or (f) GDPR (Article 21 GDPR). In this regard, please refer to section 8 f) of this privacy policy.

We will also draw your attention to the right to object separately in the individual sections (e.g. by stating: “You have the right to object”), insofar as this right exists. There you will also find further information on exercising your right to object.

1. Definitions of terms

The data protection declaration of the Hermann Pipersberg jr. GmbH is based on the terminology used in the General Data Protection Regulation (EU GDPR). Our privacy policy should be easy to read, understandable and comprehensible for the public and our customers/business partners. To ensure this, we would first like to explain the terms used below in accordance with Art. 4 of the EU GDPR.

We use the following terms, among others, in this privacy policy:

1. a) personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1. b) Person concerned

Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.

1. c) Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1. d) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting its future processing.

1. e) Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

1. f) Pseudonymization

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

1. g) Controller or controller responsible for the processing

Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

1. h) Processor

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

1. i) Recipient

Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, authorities that may receive personal data in the context of a specific investigation mandate under Union law or the law of the Member States are not considered recipients.

1. j) Third party

Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

1. k) Consent

Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name, address, etc. of the data controller

The controller within the meaning of the General Data Protection Regulation (cf. Art. 24 EU GDPR), other data protection laws applicable in the European Union (EU) and other standards of a data protection nature/application is the:

Hermann Pipersberg jr. Ltd.

Felder Hof 2
42899 Remscheid

Phone: +49 (0) 2191 56 10 0

E-mail: info@pipersberg.de

Fax: +49 (0) 2191 56 10 27

Managing directors: Frank Hirschmann, Thomas Metzen

VAT ID No.: DE 811245836

Register court: Wuppertal

Commercial register number: HRB 11084

Web: www.pipersberg.de

3. Name and address of the data protection officer

The data protection officer of the controller is

Woman

Katja Türscherl

Felder Hof 2

42899 Remscheid

Germany

Phone: +49 (0) 2191 56 10 0

E-Mail: Katja.Tuerscherl@pipersberg.de

Website: www.pipersberg.de

4. Legal basis of the processing

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR as the legal basis for processing.

5. Collection of general data/information

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following can be recorded

1. 1. browser types and versions used,
   2. the operating system used by the accessing system,
   3. the website from which an accessing system reaches our website (so-called “referrer”),
   4. the sub-websites that are accessed via an accessing system on our website,
   5. the date and time of access to the website,
   6. an Internet Protocol address (“IP address”),
   7. the Internet service provider of the accessing system and
   8. other similar data and information that may be used for security purposes in the event of attacks on the information technology systems of Hermann Pipersberg jr. GmbH.

When using these general data and information, the Hermann Pipersberg jr. GmbH does not draw any conclusions about the data subject. Rather, this information is required in order to

1. 1. to deliver the content of our website correctly,
   2. optimize the content of our website and the advertising for it,
   3. the long-term viability of the information technology systems of the Hermann Pipersberg jr. GmbH and the technology of our website, as well as
   4. to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack.

These anonymously collected data and information are processed by the Hermann Pipersberg jr. GmbH is therefore evaluated both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data processed by us. This data is not stored together with other personal data of the user.

You have the right to object.

You can send or inform us of your objection at any time (e.g. by e-mail to (e.g. by e-mail to info@pipersberg.de).

6. Cookies

Our website uses cookies.

Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Numerous websites and servers use cookies. This enables the websites/servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies/text files. A specific Internet browser can be recognized and identified via the unique cookie ID. Through the use of cookies, the Hermann Pipersberg jr. GmbH can provide visitors to this website with more user-friendly services that would not be possible without the use of cookies. By means of a cookie, the information and offers on our website can be optimized for the benefit of the user. Cookies enable the Hermann Pipersberg jr. GmbH to recognize the users/visitors of our website. The purpose of this recognition is to make it easier for users/visitors to use our website. The user/visitor to a website that uses cookies/text files, for example, does not have to re-enter their access data each time they visit the website/homepage because this is taken over by the website and the cookie stored on the user’s computer system. Another illustrative example is the cookie/text file of a shopping cart in an online store, as the online store remembers the items that a customer has placed in the “virtual” shopping cart via a cookie.

Specifically, we use the following cookies :

• • Cookies, which contain a randomly generated, specific identification number that makes you or your device identifiable during your visit to our website. These cookies are automatically deleted at the end of your visit.
  • Cookies that contain a randomly generated, specific identification number that makes you or your device identifiable on our website. These cookies are automatically deleted after one year.

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in presenting you with a website that saves your personal settings and makes it easier for you to visit our website. The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to do so may mean that you will not be able to use our website or will not be able to use it to its full extent.

You have the right to object.

The data subject may refuse the setting/use of cookies by the website of the Hermann Pipersberg jr. GmbH at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting/use of cookies. In addition, cookies/text files that have already been set can be deleted and removed at any time via an Internet browser or other software programs/software tools; this is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of the Hermann Pipersberg jr. GmbH can be used to the full extent.

7. Routine deletion/blocking of personal data

The controller, Hermann Pipersberg jr. GmbH, deletes or blocks the personal data of the data subject as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

8. Rights of the data subject

Data subjects have the following rights under the EU GDPR:

1. a) Right to confirmation and information

Each data subject shall have the right granted by the European legislator to obtain from the controller (= Hermann Pipersberg jr. GmbH) the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller (= Hermann Pipersberg jr. GmbH). If such processing has taken place, you can obtain the following information (and a copy of this information) from the controller free of charge:

• • the purposes of processing (= the purposes for which the personal data are processed)
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data is not collected from the data subject: All available information about the origin of the data
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. Art. 46 GDPR in connection with the transfer.

1. b) Right to erasure (right to be forgotten)

Each data subject shall have the right granted by the European legislator to obtain from the controller (= Hermann Pipersberg jr. GmbH) the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary

• • The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed
  • You withdraw your consent on which the processing is based according to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 (a) GDPR and there is no other legal basis for the processing.
  • The data subject shall, in accordance with Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (1) GDPR. 2 GDPR to object to the processing.
  • The personal data was processed unlawfully.
  • The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
  • The personal data have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 DS-GVO collected.

If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by our company, Hermann Pipersberg jr. GmbH, the data subject may, at any time, contact any employee of the controller (= Hermann Pipersberg jr. GmbH). An employee of our company shall promptly ensure that the erasure request is complied with immediately.

If the personal data have been made public by our company and our company is responsible pursuant to Art. 17 para. 1 GDPR to erase the personal data, the Hermann Pipersberg jr. GmbH, taking into account the available technology and the cost of implementation, shall take reasonable steps (including technical measures) to inform other controllers processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. The employee of the Hermann Pipersberg jr. GmbH will arrange the necessary measures in individual cases.

The right to erasure does not exist if the processing is necessary

• • to exercise the right to freedom of expression and information;
  • for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 6 para. 1 lit. a GDPR. Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  • for the assertion, exercise or defense of legal claims.

1. c) Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction immediately.

1. d) Right to restriction of processing

Under the following conditions, you can request the controller (= Hermann Pipersberg jr. GmbH) to restrict the processing of your personal data:

• • The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
  • The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
  • The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
  • The data subject has objected to processing pursuant to Art. Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by our company, Hermann Pipersberg jr. GmbH, the data subject may, at any time, contact any employee of the controller. The employee of the Hermann Pipersberg jr. GmbH will arrange the restriction of the processing. If the processing of personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

1. e) Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where

• • the processing is based on consent pursuant to Art. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. Art. 6 para. 1 lit. b GDPR is based and
  • the processing is carried out using automated procedures.

The freedoms and rights of other persons must not be impaired by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. In order to assert the right to data portability, the data subject may at any time contact any employee of our company, Hermann Pipersberg jr. GmbH.

1. f) Right to object

Any person affected by the processing of personal data has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Article 6 (1) GDPR. 1 lit. e or f EU GDPR; this also applies to profiling based on these provisions.

The Hermann Pipersberg jr. GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

If the Hermann Pipersberg jr. GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to the Hermann Pipersberg jr. GmbH, to the processing for direct marketing purposes, we will no longer process the personal data for these purposes.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by our company (= Hermann Pipersberg jr. GmbH) for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR. 1 GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest. In order to exercise the right to object, the data subject may contact any employee of the Hermann Pipersberg jr. GmbH. Notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object in connection with the use of information society services by means of automated procedures using technical specifications.

1. g) Automated decisions in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

1. 1. is necessary for the conclusion or performance of a contract between you and the controller,
   2. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
   3. with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

With regard to the cases referred to in (1) and (3), the data controller (= Hermann Pipersberg jr. GmbH) shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

1. h) Right to withdraw consent under data protection law

Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact any employee of the controller (= Hermann Pipersberg jr. GmbH).

9. Data protection for applications

The controller (= Hermann Pipersberg jr. GmbH) collects and processes the personal data of applicants for the purpose of carrying out the application procedure. Processing can also be carried out electronically. This is particularly the case if an applicant submits application documents to the controller by electronic means, e.g. by e-mail or via a web form that may be available on the website. If the controller (= Hermann Pipersberg jr. GmbH) concludes an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. Is managed by Hermann Pipersberg jr. GmbH does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of Hermann Pipersberg jr. GmbH are opposed. Other legitimate interest in this context is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

The legal basis for the processing of your e-mail address is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is to offer you the opportunity to contact us at any time and to be able to answer your inquiries. The legal basis for the processing of personal data resulting from the application is Art. 6 para. 1 lit. b), Art. 88 para. 1 GDPR, § 26 para. 1 BDSG-new.

The application e-mail and the documents sent will be kept until a decision has been made for or against the applicant and will then be deleted. If you have sent us your application documents by post, we will return your submitted application documents to you once the application process has been completed.

You have the right to object.

You can send or inform us of your objection at any time (e.g. by e-mail to info@pipersberg.de).

10. Data protection provisions about the application and use of the “AddThis” software

Social plugins (“plugins”) from the bookmarking service AddThis are used on our website. AddThis is a so-called bookmarking provider. The service makes it easier to bookmark websites using buttons. A list of bookmarking and sharing services is displayed by hovering over the AddThis component with the mouse or by clicking on it. AddThis is used on over 15 million websites and the buttons are displayed over 20,000,000,000 times a year, according to the operating company.

The operating company of AddThis is AddThis, Inc. 1595 Spring Hill Road, Suite 300, Vienna, VA 22182, USA.

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the AddThis servers. The content of the plugin is transmitted by AddThis directly to your browser and integrated into the page. Through the integration, AddThis receives the information that your browser has accessed the corresponding page of our website and stores a cookie on your end device to identify your browser. This information (including your IP address) is transmitted directly from your browser to an AddThis server in the USA and stored there. AddThis uses the data to create anonymized user profiles, which serve as the basis for a personalized and interest-based advertising approach to visitors to websites with AddThis plugins. The purpose and scope of the data collection and the further processing and use of the data by AddThis can be found in the AddThis privacy policy: http://www.addthis.com/privacy/privacy-policy.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) GDPR. Our necessary legitimate interest lies in the great benefit that the functions described above have for our offer. The statistical analysis of user behavior enables us in particular to respond and optimize our offer in line with your interests.

You have the right to object.

If you wish to object to the collection of data by AddThis for the future, you can set a so-called opt-out cookie, which you can download from the following link: http://www.addthis.com/privacy/opt-out You can also completely prevent the loading of the AddThis plugins with add-ons for your browser, e.g. with the script blocker “NoScript”(http://noscript.net/).

11. Data protection provisions about the application and use of Google AdSense

The Hermann Pipersberg jr. GmbH has integrated Google AdSense on this website. This is an online service that enables advertising to be placed on third-party websites. Google AdSense is based on an algorithm that selects the advertisements displayed on third-party sites to match the content of the respective third-party site. Google AdSense allows an interest-based allocation of the Internet user, which is implemented by generating individual user profiles.

The operating company of the Google AdSense component is Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google AdSense uses cookies. These are files that enable Google to analyze your use of our website. In addition, Google AdSense also uses web beacons, invisible graphics that enable Google to analyze clicks on this website, traffic on this website and similar information. The information obtained via cookies and web beacons, your IP address and the delivery of advertising formats are transmitted to a Google server located in the USA and stored there. Google may pass this collected information on to third parties if this is required by law or if Google commissions third parties to process the data. However, Google will merge your IP address with the other stored data.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) GDPR. Our necessary legitimate interest lies in the great benefit that the functions described above have for our offer. The statistical analysis of user behavior enables us in particular to respond and optimize our offer in line with your interests.

You have the right to object.

You can prevent these cookies from being stored on your PC by making the appropriate settings in your Internet browser. However, this may mean that the content of this website can no longer be used to the same extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. Google AdSense is explained in more detail at this link https://www.google.de/intl/de/adsense/start/.

12. Data protection provisions about the application and use of Facebook

Social plugins (“plugins”) from the social network Facebook are used on our website. Facebook is a social network. A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Among other things, Facebook allows users of the social network to create private profiles, upload photos and network via friend requests.

The operating company of Facebook is Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by clicking the “Like” button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information will also be published on your Facebook profile and displayed to your Facebook friends. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook’s data protection information: http://www.facebook.com/policy.php.

You have the right to object.

If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the Facebook plugins from loading with add-ons for your browser, e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/facebook-blocker/; for Opera: https://addons.opera.com/de/extensions/details/facebook-blocker/?display=en; for Chrome: https://chrome.google.com/webstore/detail/facebookblocker/chlhacbfddknadmnmjmkdobipdpjakmc?hl=de.

13. Privacy policy for the contact form

If you would like to contact us, the Hermann Pipersberg jr. GmbH via the contact form, your details from the input mask, including the contact details you provided there, will be stored by us for the purpose of processing the request and in the event of follow-up questions. We do not pass on this data without your consent.

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The legal basis for the processing of the personal data provided by you in the context of the contact is also Art. 6 para. 1 lit. b) GDPR. The other personal data processed during the sending process (IP address, date and time of sending) serve to prevent misuse of our contact form.

The legal basis for this is our legitimate interest in accordance with. Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in preventing or being able to prove misuse of our contact form.

Right of withdrawal

You can revoke this consent at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

You have the right to object.

If the processing of your data is not covered by your consent, you have the right to object. You can send or inform us of your objection at any time (e.g. by e-mail to info@pipersberg.de).

14. Data protection provisions about the application/use of Google Analytics (with anonymization function)

The controller (= Hermann Pipersberg jr. GmbH) has integrated the Google Analytics service (including anonymization function) on this website. Google Analytics is a web analysis software. Web analysis is the collection, compilation and evaluation of data about the surfing behavior of visitors/users of websites. Among other things, a web analysis service collects data on which website a data subject came to a website from, which subpages of the homepage were accessed or how often and for how long a subpage was viewed. A web analysis is generally used to optimize a website and for the cost/benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The service uses “cookies” – text files that are stored on your end device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.

IP anonymization is used on this website. The IP address of users is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference to your IP address. As part of the agreement on the order data agreement, which the website operators have concluded with Google Inc. If you have concluded a contract with us, we use the information collected to analyze website usage and website activity and provide services related to Internet usage.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) GDPR. Our necessary legitimate interest lies in the great benefit that the functions described above have for our offer. The statistical analysis of user behavior enables us in particular to respond and optimize our offer in line with your interests.

You have the right to object.

You have the option of preventing the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies. To avoid repetition, please refer to point 5 of this privacy policy.

Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and transmitted by Google Inc. be used. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de.
Here you can find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de.

15. Data protection provisions about the application and use of Google+

Social plugins (“plugins”) from the Google+ social network are used on our website. Google+ is a so-called social network. A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Google+ allows users of the social network to create private profiles, upload photos and network via friend requests, among other things.

The operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to Google’s servers. The content of the plugin is transmitted by Google directly to your browser and integrated into the page. Through the integration, Google receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Google+ profile or are not currently logged in to Google+. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there. If you are logged in to Google+, Google can directly associate your visit to our website with your Google+ profile. If you interact with the plugins, for example by clicking the “+1” button, the corresponding information is also transmitted directly to a Google server and stored there. The information is also published on Google+ and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information: http://www.google.com/intl/de/+/policy/+1button.html.

You have the right to object.

If you do not want Google to assign the data collected via our website directly to your profile on Google+, you must log out of Google+ before visiting our website. You can also completely prevent Google plugins from loading with add-ons for your browser, e.g. with the script blocker “NoScript”(http://noscript.net/).

16. Data protection provisions about the application and use of Google AdWords

The controller (= Hermann Pipersberg jr. GmbH) has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads both in Google’s search engine results and in the Google advertising network. Google AdWords enables an advertiser to define certain keywords in advance, by means of which an ad is only displayed in Google’s search engine results if the user uses the search engine to retrieve a keyword-relevant search result. In the Google advertising network, the ads are distributed to relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website. If a data subject reaches our website via a Google ad, a so-called conversion cookie is placed on the data subject’s IT system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping cart from an online store system, have been accessed on our website. The conversion cookie enables both us and Google to track whether a data subject who reached our website via an AdWords ad generated a sale, i.e. completed or canceled a purchase. The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the data subject. The conversion cookie is used to store personal information, such as the websites visited by the data subject. Each time you visit our website, personal data, including the IP address of the Internet connection used by the data subject, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) GDPR. By being able to evaluate the success of individual offers, we can, among other things, react to market behavior in a targeted manner and place our offers in the best possible way for interested users. Google also has a legitimate interest in the (personal) data collected in order to improve its own services.

You have the right to object.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on the information technology system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs. Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the data subject must call up the link www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there. Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.de/intl/de/policies/privacy/.

17. Data protection provisions about the application and use of WordPress Stats

This website uses the WordPress tool Stats to statistically analyze visitor access. The provider is Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress Stats uses cookies, which are stored on your computer and allow your use of the website to be analyzed. The information generated by the cookies about the use of our website is stored on servers in the USA. Your IP address is anonymized after processing and before storage.

“WordPress-Stats” cookies remain on your device until you delete them.

The storage of “WordPress Stats” cookies takes place on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of our website may be restricted.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) GDPR. Our necessary legitimate interest lies in the great benefit that the functions described above have for our offer. The statistical analysis of user behavior enables us in particular to respond and optimize our offer in line with your interests.

You have the right to object.

You can object to the collection and use of your data for the future by clicking on this link to set an opt-out cookie in your browser: https://www.quantcast.com/opt-out/.

If you delete the cookies on your computer, you must set the opt-out cookie again.

18. Use of Google Web Fonts

We use external fonts, so-called Google Fonts, on our website. Google Fonts is a service of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The web fonts are integrated via an interface (“API”) to the Google services. By integrating web fonts, Google may collect and process information (including personal data). It cannot be ruled out that Google may also transmit the information to a server in a third country.

We do not collect any data ourselves as part of the provision of Google Fonts.

By integrating Google Fonts, we pursue the purpose of being able to display uniform fonts on your device.

The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f) GDPR. Our necessary legitimate interest lies in the great benefit that a uniform presentation of the fonts offers. Thanks to the possibility of a uniform presentation, we keep the design effort lower than if we had to react to font standards of different operating systems or browsers with our own graphically adapted websites. Google also has a legitimate interest in the (personal) data collected in order to improve its own services.

You can find more information at:

• • www.google.com/fonts#AboutPlace:about
  • https://developers.google.com/terms/

You have the right to object.

You can send or inform us of your objection at any time (e.g. by e-mail to info@pipersberg.de).

19. Legitimate interests in the processing of the controller or the third party

Does the processing of pers. Data based on Article 6 I lit. f) EU-DSGVO is the legitimate interest of Hermann Pipersberg jr. GmbH to carry out our business operations for the benefit of our employees and our shareholders.

20. Storage period of the personal data

The criterion for the duration of the storage of personal data is the respective statutory retention period. After this period has expired, the corresponding data is routinely deleted, provided it is no longer required for the fulfillment or initiation of the contract.

21. Existence of automated decision-making/profiling

As a responsible company, Hermann Pipersberg jr. GmbH does not use automated decision-making or profiling.

22. Contractual/statutory provisions on the provision of personal data Data

We, the Hermann Pipersberg jr. GmbH, inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Sometimes it may be necessary for a contract to be concluded for a data subject to provide us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact one of our employees. Our employee clarifies to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.

23. Right to lodge a complaint with the competent supervisory authority

In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

24. SupplementaryPrinciples of data processing at Hermann Pipersberg jr. GmbH in the event of contact/correspondence by e-mail, letter etc. or conclusion of a contract etc.

First of all, it should be noted that this point concerns supplementary data protection provisions (for the cases arising from the heading). In particular, points 1-4, 7-9, 13, 19-23 of this privacy policy naturally also apply in the sense of the following additions.

We would like to point out that we collect, store, process and use the personal data collected by us from suppliers, customers, other business partners and interested parties, in particular name, address, telephone number, e-mail address, contact details of contact persons, customer number as well as order and delivery data for the purpose of initiating, establishing and processing contractual and delivery relationships, including delivery, payment and any warranty or product liability.

The personal data collected from you is required for the conclusion and processing of a contract or corresponding preparatory correspondence. You are not obliged to provide this data. However, we cannot conclude a contract or conduct correspondence with you without this data.

In this respect, your data is processed on the basis of Article 6 para. 1, b General Data Protection Regulation.

We also collect, store, process and use this data for the purpose of maintaining customer and business relationships, marketing and advertising for our own products and services. In this respect, your data is processed on the basis of Article 6 para. 1, f General Data Protection Regulation. Our legitimate interest in processing your data in this respect arises from our efforts to publicize and sell our own products and services.

Furthermore, we process data that we receive from credit agencies (e.g. from Schufa) under the legal requirements for the purpose of credit checks regarding our suppliers, customers and other business partners. In this respect, your data is processed on the basis of Article 6 para. 1, f General Data Protection Regulation. Our legitimate interest in the processing of this data arises from our interest in receiving the contractually owed consideration (e.g. remuneration) for our services.

Personal data will not be passed on to third parties, with the exception of

• • Transfers to third parties who are engaged by us to fulfill contractual and delivery relationships, for example to the banking institutions/payment service providers processing payments and to the transport companies/shipping companies processing deliveries;

• • Transfers to third parties who are engaged by us in the context of marketing and advertising for our own products and services, for example to marketing service providers and printers;

• • Transfers to specialized service providers who provide services for us on our instructions and under our responsibility within the scope of the aforementioned purposes (contract data processors), for example IT service providers;
  • Transfers to third parties to check creditworthiness (in the case of legitimate interest). For this purpose, we work together with Creditreform Solingen Kirschner GmbH & Co KG, Kuller Str. 58, 42651 Solingen, from whom we receive the necessary data. For this purpose, we transmit your name and contact details to Creditreform. Further information on data processing at Creditreform can be found in the detailed information sheet “Creditreform_Informationen gem. Art. 14 EU GDPR or at https://www.boniversum.de/eu-dsgvo/informationen-nach-eu-dsgvo-fuer-verbraucher/

• • Transfers to third parties to which we are legally obliged, for example to the tax office or other state authorities;

• • Transfers to third parties to fulfill our obligations under commercial and tax law, for example to our tax advisor.

Data will only be transferred to a third country outside the European Union, which is also not a contracting state of the Agreement on the European Economic Area, if this data transfer is necessary for the fulfillment of an existing contract between you and us (for example, delivery to a third country).

Your data will be processed for the duration of the initiation and execution of a contractual or delivery relationship and for the duration of the continued existence of obligations arising from a contractual or delivery relationship, for example any warranty or product liability obligations, as well as for the duration of statutory retention periods under commercial or tax law.

With regard to the processing of your data for the duration of statutory retention periods under commercial or tax law, the processing is carried out on the basis of Article 6 para. 1, c General Data Protection Regulation.

If we process personal data for advertising purposes, you have the right to object at any time to the processing of your personal data for advertising purposes. If you object to processing for advertising purposes, your personal data will no longer be processed for these purposes.

How long will my data be stored?

We process and store your personal data as long as this is necessary for the fulfillment of our contractual and legal obligations. It should be noted that our business relationship is generally a continuing obligation that is intended to last for years.

If the data are no longer required for the fulfillment of contractual or legal obligations, they are regularly deleted, unless their – temporary – further processing is necessary for the following purposes:

• • Fulfillment of retention obligations under commercial and tax law, which may arise, for example, from: German Commercial Code (HGB), German Fiscal Code (AO. The retention and documentation periods specified there are generally six to ten years.

Preservation of evidence within the scope of the statutory statute of limitations. According to §§ 195 ff of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.