We take data protection seriously
Protecting your privacy when processing personal data is an important cause. When you visit our website, our web servers store the IP of your internet service prover, the website you are visiting from, the web pages you visit on our site, as well as the date and duration of your visit, as standard. This data is necessary for the technical provision of the website and to ensure secure operation of the server. A personalised evaluation of this data will not be carried out.
If you transmit data via the contact form, this data will be stored on our servers as part of data protection measures. Your data will only be used to process your query. Your data will be handled in strictest confidence. Your data will not be passed on to third parties.
An den Gärten 8 – 10
Tel.: +49 (0) 9602 9444-0
Personal data is data relating to your person. This includes your name, address and email address. You do not have to disclose any personal data in order to visit our website. In some cases, we require your name, address, and other information in order to be able to offer you the desired services.
The same applies if we provide informational materials at your request or respond to your query. In such cases, we will always notify you. We only store data that you have transmitted to us automatically or voluntarily.
If you use one of our services, as a rule, we only collect the data necessary for us to be able to offer you our services. We may ask for further information, but this will be on a voluntary basis. Whenever we process personal data, we do this solely to provide you with our services or in pursuit of our commercial objectives.
Automatically stored data
Server log files
The site provider automatically retrieves and stores information in server log files that are transferred to us automatically via your browser. This information includes:
This data is not merged with data from other sources. The data is processed in line with Art. 6 para. 1 (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
For technical security reasons, especially for preventing attempted attacks on our web server, this data will be stored by us for a short time. This data cannot be used to identify an individual person. After no more than seven days, the data will be anonymised on a domain level by truncating the IP address, so that it is no longer possible to trace it back to an individual user. The data will also be used in an anonymised form for statistical purposes; this data is neither compared with other datasets nor passed on to third parties, even in a truncated form. The number of site visits is only disclosed as part of our server statistics, which are published every two years in our activity report.
Google Tag Manager
Google Analytics with anonymisation function
The information generated by these cookies, such as the time, location and frequency of your website visits, including your IP address, are transferred to Google servers in the USA and stored there.
On our website, we use Google Analytics with the “_gat.anonymizeIp” extension. In this case, your IP address will be truncated and therefore anonymised within a European Union Member State or another treaty state of the Agreement on the European Economic Area.
Google uses this information to analyse your use of the website, to generate reports on website activity for us and to perform other services related to the website activity and internet usage.
Google may transfer this information to third parties where required to do so by law or if the third parties will process this data on behalf of Google.
If you visit our website from a mobile device (smartphone or tablet) and clear your cookies, this will also clear the opt-out cookie, meaning that you will have to click the link again.
If you have provided consent for Google to link your web and app browsing history with your Google account in order to display personalised ads, Google will use your data in conjunction with Google Analytics data to generate target demographic lists for cross-device remarketing. For this purpose, Google Analytics will initially record your Google-authenticated ID on our website, which is linked to your Google account (and therefore personal data). Google Analytics will then temporarily link your ID with your Google Analytics data in order to optimise our target demographics.
If you do not consent to this, you can disable this function by changing the appropriate settings in the “My Account” section of your Google account.
By using our website, you provide consent for the personal data about yourself to be processed by Google as part of the data processing measures outlined above and for the specified purpose. You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, please note that in such cases, you may be unable to make full use of our website. Moreover, you can prevent Google from collecting and processing the data about your website activity generated by the cookies by clicking the following link and downloading and installing the DoubleClick deactivation add-on available there as a browser plugin. Alternatively, you can also deactivate the DoubleClick cookies with this opt-out feature.
For the purposes of optimised design and functionality of our website, we use solutions and technology provided by econda GmbH (www.econda.de) that records and stores anonymised data as a basis for creating usage profiles using aliases. Cookies may be used for this purpose that allow an internet browser to be recognised on repeat visits to the website. However, without explicit permission from the visitor, the usage profiles will not be merged with any other data relating to the subject to whom the alias refers. In particular, IP addresses are made unidentifiable immediately after receipt, which means that the usage profiles cannot be associated with IP addresses. Visitors to this website can object to the collection and storage of this data in future at any time at the following link: https://www.econda.de/en/data-storage-opt-out/
For the integration of videos, we use the provider Vimeo, amongst others. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York, 10011.
Our website features plugins from the provider Vimeo. If you visit one of our websites that features this plugin, for example our media library, a connection is established to the Vimeo servers to display the plugin. As a result, the Vimeo server is informed of which of our web pages you have visited. If you are also logged into Vimeo as a member, Vimeo will associate this information with your personal user account. Any usage of the plugin, e.g. by clicking the start button on a video, will also result in this information being associated with your user account. You can prevent the data from being associated by logging out of your Vimeo account and deleting the relevant Vimeo cookies before visiting our website.
Youtube in privacy-enhanced mode
This website uses Google Maps to display maps and provide directions for navigation. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. By using Google Maps on this website, you consent to the collection, processing and use of any data, either that you have provided or that has been collected automatically, by Google, its affiliates, or third-party providers.
Free whitepapers, e.g. Trend Report
In order to receive our free whitepapers, such as the Trend Report, you must provide us with your email address to register for the download. Disclosing your title, name, company and telephone number is not mandatory. By registering, you consent to receiving upcoming issues of the Trend Report as well as surveys about its usage by email, and you also consent to being contacted by telephone or email. You can revoke this consent at any time (email@example.com).
We use a double opt-in process for newsletter distribution, which means that we will only send you a newsletter via email if you have previously provided your explicit consent for the newsletter service to be activated. We will send you a notification email asking you to click a link in the email to confirm that you wish to receive our newsletter. When you subscribe to our newsletter, we will store your IP address and the date of registration. This information is stored solely as evidence in case a third party abuses your email address in order to subscribe to the newsletter without your knowledge or consent. If, in future, you no longer wish to receive our newsletter, you can unsubscribe at any time without incurring any additional transmission costs beyond the basic tariffs.
We have introduced technical and administrative security measures to protect your data against loss, destruction, manipulation and unauthorised access. All of our employees and sub-contractors comply with the applicable data protection regulations.
Reporting obligations according to Art. 13 GDPR
- What data is processed and what sources does the data originate from?
We process data that you have provided as part of contract initiation or fulfilment, based on the consent provided or as part of your application or employment here.
The personal data includes:
Your personal details and contact information; in the case of customers, this can include name, address, contact information (email address, telephone number, fax), bank information, images.
We also process the following personal data:
- For what purposes and on what legal basis is the data processed?
We process your data in line with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act of 2018, as amended.
- Processing personal data for marketing purposes
You can object to your personal data being used for marketing purposes, either entirely or for individual measures, at any time without incurring any additional transmission costs beyond the basic tariffs.
According to the legal provisions of § 7 para. 3 UWG (German Fair Trade Practices Act), we are entitled to use the email address you provided when finalising the contract for the purposes of direct marketing of similar goods or services. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter or not.
If you no longer wish to receive these kinds of recommendations via email, you can revoke your consent for the use of your email address in this way at any time without incurring any additional transmission costs beyond the basic tariffs. A message in text form will suffice for this. Every email contains a link to unsubscribe from communications.
- Who receives my data?
If we employ a processor as a part of order processing, we still hold responsibility for protecting your data. All processors are contractually obligated to handle your data confidentially and only as part of performing the contractual services. The processors we employ only receive your data if it is required to perform the relevant service. This may include IT service providers that are required for the operation and security of our IT system, as well as advertising and mailing list providers for our own marketing campaigns.
Your data will be processed in our customer database. The customer database serves to increase the quality of the existing customer data (clearing duplicates, identifying customers who are deceased or rectifying addresses) and allows for data from public sources to be incorporated.
This data will be made available to affiliated companies where necessary for contract fulfilment. Customer data is separated and stored on a company-specific basis, whereby the parent company functions as a service provider for the individual affiliates.
Authorities and courts, as well as external auditors, may receive your data if required to do so by law or as part of legal proceedings.
Furthermore, your data may also be received by insurance providers, banks, credit agencies and service providers for the purposes of contract initiation and fulfilment.
- How long will my data be stored for?
We process your data until the business relationship is terminated or until the applicable mandatory retention period has expired (as specified in the German Commercial Code, Fiscal Code, Care Home Act and Working Hours Act, for example); we may also retain your data until there is no longer a risk of litigation where the data would be used as evidence.
- Is personal data transferred to third countries?
In principle, we do not transfer data to third countries. In individual cases, this may occur on the basis of an adequacy decision by the European Commission, standard contractual clauses, appropriate safeguards or your explicit permission.
- What are my rights with regard to data protection?
The General Data Protection Regulation states that you have the right of access to your data and the right to the rectification, erasure and restriction of the processing of personal data stored. You also have the right to object to your data being processed, the right to data portability and the right to file a complaint.
Right of access by the data subject:
You have the right to receive information about whether and to what extent we process your data.
Right to rectification:
If the data we process is incomplete or incorrect, you can request the rectification or completion of the data from us.
Right to erasure:
You have the right to the erasure of your personal data if the processing is unlawful or if there are no overriding legitimate grounds for the processing. Please note that there are some circumstances in which immediate erasure is not possible, e.g. in the case of legally mandated retention periods.
Regardless of whether you wish to exercise your right to erasure or not, we will erase your data immediately and completely as long as this does not conflict with any contractual or legal obligations for retention.
Right to the restriction of processing:
You have the right to request the restriction of the processing of your data if:
Right to data portability:
You have the right to receive the personal data concerning yourself that you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller without interference from us, provided that:
If it is technically feasible, you can request a direct transfer of your data to another controller.
Right to object:
As we process your data in pursuit of legitimate interests, you can object to your data being processed at any time; this also applies to profiling carried out based on these provisions. We will cease to process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. You have the right to object to the processing of your data for direct marketing purposes at any time, without stating a reason.
Right to complain:
If you believe that we have infringed upon German or European data protection laws in processing your data, we ask that you contact us to resolve the issue. Of course, you also have the right to file a complaint with the responsible supervisory authority or state data protection authority.
If you wish to exercise this right in relation to ourselves, please contact our data controller. In cases of doubt, we may ask for additional information to confirm your identity.
- Am I obligated to provide data? The processing of your data is required to finalise or fulfil the contract you have entered into with us. If you do not provide this information, we will usually be forced to deny finalisation of the contract or terminate an existing contract as we are unable to fulfil it. However, you are not obligated to provide consent for the processing of data that is not relevant to the fulfilment of the contract or legally mandated.
All interested parties and visitors to our website can contact us in relation to data protection matters at:
Projekt 29 GmbH & Co. KG
Tel.: +49 (0) 941 2986930
Fax: +49 (0) 941 29869316