Privacy policy

I. Name and address of the person responsible 

The responsible body for data processing is:

Mahler GmbH

Robert-Bosch-Str. 7-9

73207 Plochingen - Deutschland

Phone: +49 (0)7153 9251-0

E-mail: info@mahler.de

The responsible authority is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.). 

II. Contact details of the data protection officer  

A statutory data protection officer has been appointed for our company and can be contacted at the address given in the imprint of the responsible persons with the addition PRIVACY POLICY by postal mail or by e-mail at the following address: datenschutz@mahlerofen.de

III. data protection at a glance/ general information

1. To what extent do we process your personal data? 

We collect and use your personal data only to the extent necessary to provide a functional website and our content and services. The collection and use of your personal data is regularly only carried out with your consent. An exception applies in those cases in which the processing of the data is permitted by statutory regulations or in which it is based on a contractual relationship.

2. What is the legal basis for the processing of my personal data? 

Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a DSGVO serves as the legal basis for the processing of this data. Art. 6 para. 1 lit. b DSGVO serves as the legal basis for the processing of personal data required for the fulfilment of a contract to which you are a party. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis. If the processing is necessary to safeguard a legitimate interest on our part or that of a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the first interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing. 

3. Data transmission to the USA

For a data transfer to an insecure third country, including the USA, appropriate guarantees for the protection of your personal data are required according to Art. 46 DSGVO. Various US companies, including Google, have fulfilled these guarantees in the past by joining the EU-US Privacy Shield Agreement. After the European Court of Justice (ECJ) declared the EU-US Privacy Shield Agreement with the USA invalid on 07/16/2020, this can no longer be used as a guarantee for compliance with an adequate level of data protection. Instead, Art. 49 (1) (a) FADP constitutes an exceptional case for data transfer to an unsafe third country.

Extract from Art. 49 DSGVO:

Art. 49 DSGVO Exemptions for certain cases

1.      in the absence of an adequacy finding pursuant to Article 45(3) or of adequate safeguards pursuant to Article 46, including binding internal data protection rules, a transfer or set of transfers of personal data to a third country or international organisation shall be allowed only under one of the following conditions:

1.      the data subject has given his or her explicit consent to the proposed data transfer after being informed about the potential risks of such data transfers to him or her without an adequacy finding and without adequate safeguards

2.     

If the processing / storage of your personal data, this includes for example your IP address, is carried out on computer systems in the USA, this can only take place if you give your express consent to the transfer of data after a detailed explanation of the risks. This is done via the privacy settings when you enter our website. Corresponding explanations on the trackers / cookies used by us can be found in this data protection declaration from no. VI onwards.

IV. Your rights

1. What rights can you assert? 

You have the right to information under Article 15 DSGVO, the right to rectification under Article 16 DSGVO, the right to cancellation under Article 17 DSGVO, the right to limitation of processing under Article 18 DSGVO, the right to opposition under Article 21 DSGVO and the right to data transfer under Article 20 DSGVO. The restrictions under §§ 34 and 35 BDSG apply to the right to information and the right to cancellation. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 DSGVO in conjunction with § 19 BDSG). 

You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the DSGVO came into force, i.e. before 25 May 2018. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this. 

Please feel free to contact our data protection officer in this regard. 

2. Do I have to provide my personal data? 

As part of our business relationship, you must provide us with the personal data that is necessary for establishing and conducting a business relationship and fulfilling the associated contractual obligations or which we are legally obliged to collect. Without this data we will normally have to refuse the conclusion of the contract or the execution of the order or will no longer be able to execute an existing contract and may have to terminate it. 

3. Is there an automated decision-making process? 

No. We do not currently use fully automated decision making in accordance with Art. 22 DSGVO to establish and conduct business relationships. Profiling" does not take place. 

4. Information on your right of objection pursuant to Article 21 DSGVO 

Right of objection in individual cases

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data pursuant to Article 6(1)(f) DSGVO (processing of data on the basis of a balancing of interests).

If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. 

Right to object to the processing of data for direct marketing purposes

In individual cases we process your personal data in order to operate direct advertising if we have your permission to do so. You have the right at any time to object to the processing of your personal data for the purpose of such advertising. If you object to the processing for purposes of direct marketing, we will no longer process your personal data for these purposes. 

Recipient of the objection

The objection can be made without form with the subject "Objection" under indication of your name, your address and your date of birth and should be addressed to: datenschutz@iva-schmetz.de

5. Further information 

If you would like information that this data protection declaration cannot give you, or if you would like further information on a specific point, please contact our data protection officer. He will be happy to help you. 

V. "By the way" 

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to advertising mails

We hereby object to the use of contact data published within the scope of the imprint obligation to send unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action against unsolicited mailing or e-mailing of spam and other similar advertising materials.

VI. Use of cookies 

Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser during your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies, which are absolutely necessary for the proper functioning of our website, are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website visitor has no choice for the use of these cookies. The website operator has a justified interest in the storage of cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are dealt with separately in this data protection declaration.

VII. provision of the website and creation of log files 

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

(1) Information about the browser type and the version used

(2) the operating system of the user

(3) the internet service provider of the user

(4) the IP address of the user

(5) Date and time of access

(6) Websites from which the User's system accesses our Website

(7) Websites accessed from the User's system via our Website

The data is also stored in the log files of our system. This does not apply to the user's IP address or other data that enable the data to be assigned to a user. These data are not stored together with other personal data of the user. 

Legal basis for the temporary storage of data pursuant to Art. 6 para. 1 lit. f DSGVO.

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. These purposes represent our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.

VIII. Contact form

On our website there are contact forms which can be used for electronic contact. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are:

a) First name

b) surname

c) e-mail address

d) street and house number

e) Postal code

f) City

g) Country

h) Position

i) Company

Your consent will be obtained for the processing of your data as part of the sender process and reference will be made to this data protection declaration.

Alternatively, you can contact us via the e-mail address provided. In this case, the personal data transmitted with your e-mail will be stored. The data will not be passed on to third parties in this context. The data will be used exclusively for the processing of the conversation.

If you have given your consent, the legal basis for processing the data is Art. 6 para. 1 lit. a DSGVO. The legal basis for the processing of data transmitted in the course of an e-mail is Art. 6 para. 1 lit. f DSGVO. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

The processing of personal data on the input mask serves us solely to process the establishment of contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The data is deleted if it is no longer required for the purpose of its collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you as the user has ended. This is the case if it can be inferred from the circumstances that the relevant facts have been conclusively clarified.

You have the right to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case the conversation cannot be continued. Please send us an email to datenschutz@iva-schmetz.de. In this case, all personal data stored in the course of contacting us will be deleted unless there are legal retention periods.  

Applicant Management

You would like to apply for a job with us? We would be pleased if you send us your application by e-mail.
As part of our applicant management, we process the personal data you provide us with to initiate an employment relationship on the basis of Art. 88 DSGVO in conjunction with § 26 Para. 1 BDSG. Alternatively, collective agreements (group, general and works agreements as well as collective bargaining agreements) can be concluded in accordance with Art. 88 DSGVO in conjunction with § 26 para. 4 BDSG as well as consents (e.g. for photographs) pursuant to Art. 88 DSGVO in conjunction with Art. 26 para. 2 BDSG can be invoked.
In individual cases, we process your data in order to protect legitimate interests, e.g. in the case of intra-group data exchange for administrative purposes (Art. 6 para. 1 f DSGVO in conjunction with Recital 48).
If special categories of personal data (e.g. severe disability) are processed, this is done on the basis of Art. 88 DSGVO in conjunction with § Article 26 paragraph 3 BDSG. In addition, the processing of health data for the assessment of your ability to work in accordance with Art. 9 para. 2 h) in conjunction with § Art. 22 para. 1 b) BDSG may be necessary.
We process and store your personal data for as long as it is necessary to fulfil the purposes of the data processing or legal, contractual or statutory obligations. Afterwards the data will be deleted or its processing restricted. In the event that no employment relationship is established after completion of the application process, we will block your data for 6 months after cancellation; your data will be deleted at the latest 3 years after completion of the application process. After expiry of the regular 3-year period of limitation according to § 195 BGB (German Civil Code), this is the point in time at which any claims under the General Equal Treatment Act (AGG) become time-barred. Should we wish to store your application in a so-called "applicant pool" for a period of more than 3 years, we would ask you for your consent after the 3-year period has expired.
Of course you are also free to withdraw your application at any time. In this case, your data would also be deleted if they are no longer required for the purpose for which they were collected. Sending an e-mail to us with the relevant content is sufficient for this purpose. The revocation of any consents granted is also possible at any time.

IX. Google Analytics

This website uses functions of the web analysis service Google Analytics, if you have given us your consent. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website if you have given the permission to do so. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

This is a web analysis service of Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site.
Google Analytics is used exclusively with activated IP anonymisation (so-called IP masking). This means that the IP address of users of Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area is shortened. Only in exceptional cases, e.g. if there are technical failures in Europe, will the full IP address be transferred to a Google server in the USA and shortened there.
With the IP anonymisation method used by Google, the full IP address is never written to a hard disk at any time, as the entire anonymisation process takes place almost immediately after receipt of the request in the working memory.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide further services associated with website and internet use, in particular functions for display advertising and Google Analytics reports on performance according to demographic characteristics and interests to the website operator. The data is stored on servers in the USA in unencrypted form and both Google and state authorities have access to this data. Data can also be linked to other user data - such as search history, personal accounts, user data from other devices and all other devices that Google has for this user.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. In Google Analytics reports on performance by demographic characteristics and interests, data obtained through interest-based advertising by Google and visitor data from third parties (such as age groups or interest groups) are used.

The legal basis for the processing / transmission of your personal data is your express and informed consent (see text passage above) in accordance with Art. 49 Para. 1 lit. a DSGVO. See also section III. No. 3.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
Download and install Google Browser Plugin
Link: tools.google.com/dlpage/gaoptout
You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent future collection of your information when you visit this site:
Disable Google Analytics
Note: the deactivation link is: javascript:gaOptout(); alert('Google Analytics disabled');
javascript:gaOptout()
For more information on terms of use and data protection, please visit www.google.de/analytics/terms/de.html
or under www.google.de/intl/de/policies/.

Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

Google LLC complies with European data protection law and is certified under the Privacy Shield Agreement:https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Here you will find further information on the use of data by Google Inc.: 

policies.google.com/privacy/partners collected by Google partners)

adssettings.google.de/authenticated (Settings about advertising that is displayed to you) 

policies.google.com/technologies/ads of cookies in ads

IP Anonymization

We have activated the IP anonymization function on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as Google from processing this data by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An Opt-Out-Cookie is set, which prevents the collection of your data on future visits to this website: deactivate Google Analytics.

For more information on how Google Analytics uses user data, please see Google's privacy policy: support.google.com/analytics/answer/6004245.

Order data processing

We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics of Google Analytics

This website uses the function "demographic features" of Google Analytics. This allows reports to be generated that contain information about the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and visitor data from third parties. This information cannot be associated with any specific individual. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit Google Analytics from collecting your data as described under "Objection to data collection".

X. Youtube

Our website uses plugins from the YouTube page operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plug-in, a connection is established to YouTube's servers in the United States. This will tell the YouTube server which of our pages you have visited.

If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting by opening a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to your respective YouTube account. YouTube is used in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.

Further information on the handling of user data can be found in YouTube's data protection declaration at: www.youtube.com/yt/about/de/. 

YouTube is used in the interest of an attractive presentation of our online offers, provided that you have given us your consent in accordance with Art. 49 para. 1 lit. a DSGVO (see also Section III No. 3).

YouTube and Google receive information through the YouTube component that you have visited our website whenever you are logged in to YouTube at the same time as accessing our website, regardless of whether you are watching a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google in this way, you can prevent it from being transmitted by logging out of your YouTube account before you visit our website. 

YouTube's privacy policy, which is available at www.google.de/intl/de/policies/privacy/, discloses the collection, processing and use of personal data by YouTube and Google. 

XII. Web Fonts from Fast.Fonts.Net or Fonts.com 

This page uses so-called web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net) for the uniform display of fonts. When calling up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the fonts.com servers in the United States. By doing so, fonts.com becomes aware that your IP address has been used to access our website. The use of Fonts.com Web Fonts is made in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

For the use of these fonts we need your consent according to Art. 49 para. 1 lit. a DSGVO, because your IP address will be transferred to the USA. If your browser does not support web fonts or you refuse your consent, a standard font will be used by your computer. This can cause the page content to be displayed in a very uncoordinated manner.

Further information on these web fonts can be found at www.fonts.com/info/legal

and the Fonts.com Privacy Policy: www.fonts.com/info/legal/privacy

and in the privacy policy of Monotype GmbH: www.monotype.com/legal/privacy-policy

Note: Although the Privacy Shield no longer constitutes a legal basis (see also section III No. 3) and thus individual passages no longer apply, the above-mentioned links have been preserved for your information.

XIV. Newsletter and broad communication 

We send newsletters, e-mails and other electronic notifications (hereinafter "Newsletter") only with the consent of the recipients or a legal permission. If the contents of the newsletter are specifically described in the context of a registration for the newsletter, they are decisive for the consent of the users. In addition, our newsletters contain information about our services and us.

To subscribe to our newsletters, it is basically sufficient to enter your e-mail address. However, we may ask you to provide a name for the purpose of personal contact in the newsletter, or other information if this is necessary for the purposes of the newsletter.

Deletion and limitation of processing: We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. This period corresponds to the statutory period of limitation for claims against us. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the e-mail address in a blacklist (so-called "Blacklist") for this purpose alone.

The logging of the registration procedure is based on our legitimate interests for the purpose of proving that it has been carried out properly. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure sending system.

Notes on legal bases: The sending of newsletters is based on the consent of the recipients or, if consent is not required, on our legitimate interests in direct marketing, if and to the extent that this is permitted by law, e.g. in the case of advertising to existing customers. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process will be recorded on the basis of our legitimate interests in order to prove that it has been carried out in accordance with the law.

Contents: information about us, our services, actions and offers as well as invitations to events.

Analysis and performance measurement: The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened, or, if we use a mailing service provider, from their server. Within the scope of this retrieval, technical information, such as information on the browser and your system, as well as your IP address and the time of the retrieval, is initially collected.

This information is used for the technical improvement of our newsletter based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined by means of the IP address) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider to observe individual users. Rather, the evaluations serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

The evaluation of the newsletter and the measurement of success are carried out, subject to the express consent of the users, on the basis of our legitimate interests for the purpose of using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of the users.

A separate revocation of the performance measurement is unfortunately not possible, in this case the entire newsletter subscription must be cancelled or must be contradicted.

a)        Processed data types: Inventory data (e.g. names), contact data (e.g. e-mail), meta/communication data (e.g. IP addresses), usage data (e.g. interest in content, access times).

b)        Persons concerned: communication partner.

c)        Purposes of processing: direct marketing (e.g. by e-mail or by post).

d)        Legal bases: Consent (Article 6(1) page 1 DSGVO), legitimate interests (Article 6(1) page 1 DSGVO).

e)        Opt-Out: You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the above mentioned contact options, preferably e-mail.

Services and service providers:

1) Mailchimp: E-mail marketing platform; service provider: Mailchimp - Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA; Website: mailchimp.com; Privacy Policy: mailchimp.com/legal/privacy/; Privacy Shield (ensuring the level of data protection when processing data in the USA): www.privacyshield.gov/participant.

XV. Cloud Services 

We use software services accessible via the Internet and running on the servers of their providers (so-called "cloud services", also referred to as "software as a service"), e.g. Microsoft Teams, for the following purposes: exchanging documents, content and information with specific recipients or for the authenticated and 2-factor secured login of users as well as chats and participation in audio and video conferences.

In this context, personal data may be processed and stored on the servers of the providers, as far as these are components of communications with us or otherwise processed by us as set out in this privacy policy. These data may include in particular Master data and contact details of the users, data on procedures, contracts, other processes and their contents belong to the system. The providers of the Cloud services also process Usage data and metadata used by them for security purposes and service optimization.

If we use cloud services to provide other users or publicly accessible websites with forms or other documents and content, the providers may store cookies on the users' devices for web analysis purposes or to remember user settings (e.g. in the case of media control).

Notes on legal bases: If we ask for consent to use the cloud services, the legal basis for processing is consent. Furthermore, their use can be a component of our (pre)contractual services, provided that the use of the cloud services has been agreed in this context. Otherwise, user data is processed on the basis of our legitimate interests (i.e., interest in efficient and secure administration and collaboration processes).

Processed data types:Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

Persons concerned:Customers, employees (e.g. employees, applicants, former employees), interested parties, communication partners.

Purpose of the processing:Office and organisational procedures.

Legal basis:Consent (Art. 6 para. 1 sentence 1 lit. a DSGVO), Performance of the contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. DSGVO), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO), Consent in accordance with Art. 49 Para. 1 lit. a DSGVO for transfer to servers in the USA.

Used services and service providers:

1) Microsoft Cloud services:Cloud storage services; service providers: Microsoft Corporation, One Microsoft Way,Redmond, WA 98052-6399 USA; Website: www.microsoft.com/en-us/; privacy policy: privacy.microsoft.com/en-us/privacystatement, Safety Instructions: www.microsoft.com/en-us/trust-center; Privacy Shield (ensuring the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active.

XIV. Usercentrics Consent Management Platform

This platform is used by the website visitor to select cookies and trackers.

The provider is Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. Data resulting from this query are processed on a server within the EU. The legal basis is Art. 6 Para. 1 lit. c DSGVO (see also the ruling of the Federal Court of Justice of May 2020).

A list of the data collected can be found in the explanatory section of the privacy settings under the item "Further settings".

As of 08/06/2020