The responsible party within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:

flegisto GmbH, Zeiler Weg 1, 96166 Kirchlauter, Germany

Data protection officer: Sigrid Gehring

Your data protection rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

  • Information about your data stored by us and its processing (Art. 15 DSGVO),
  • Correction of inaccurate personal data (Art. 16 GDPR),
  • Deletion of your data stored with us (Art. 17 DSGVO),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal Pflichten (Art. 18 DSGVO),
  • object to the processing of your data by us (Art. 21 DSGVO) and
  • Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).

If you have given us consent, you can revoke this at any time with effect for the future.

You can contacta supervisory authority at any time with a complaint, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the responsible body.

A list of the supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Cookies

Nature and purpose of the processing:

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.

This provides us with certain data such as IP address, browser used and operating system.

Cookies cannot be used to launch programs or transfer viruses to a computer. The information contained in cookies allows us to facilitate your navigation and enable the correct display of our web pages.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course, you can also view our website without cookies.

Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.

Storage duration and cookies used:

If you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Insofar as these cookies may (also) affect personal data, we inform you about this in the following sections.

You can set your browser to accept individual cookies or the entire cookie. Delete cookie inventory. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you can find the necessary information under the following links:

  • Mozilla Firefox:

https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen

  • Internet Explorer:

https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-mana ge-cookies

Nature and purpose of the processing:

In order to provide cost-justified services, we request additional data, such as payment details, in order to be able to execute your order.

Legal basis:

The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b DSGVO.

Recipient:

Recipients of the data are, if applicable, order processors. Storage period:

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered contents and services.

Comment function

Nature and purpose of the processing:

When users leave comments on our website, in addition to this information, the time of their creation and the user name previously selected by the website visitor are also stored. This serves our security, as we can be prosecuted for unlawful content on our website, even if it was created by users.

Legal basis:

The processing of the data entered as comments is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).

By providing the comment function, we would like to enable you to interact in an uncomplicated manner. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.

Recipient:

Recipients of the data are, if applicable, order processors. Storage period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case when the communication with the user has been concluded and the company can see from the circumstances that the matter in question has been conclusively clarified.


Provision prescribed or required:

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our comment function.

Newsletter

Nature and purpose of the processing:

Your data will only be used to send you the newsletter you have subscribed to by e-mail. Your name is given in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to provide your e-mail address. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail of circumstances relevant to the service or registration (e.g., changes to the service or the registration).

changes to the newsletter offer or technical circumstances).

For an effective registration we need a valid e-mail address. In order to verify that a registration is actually made by the owner of an email address, we use the

“Double-opt-in” procedure. For this purpose, we log the order for the newsletter, the sending of a confirmation email and the receipt of the response requested herewith. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.

Legal basis:

Based on your express consent (Art. 6 para. 1 lit. a DSGVO), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a corresponding link in each newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this privacy policy.

Recipient:

Recipients of the data are, if applicable, order processors. Storage period:

In this context, the data will only be processed as long as the corresponding consent has been given. Afterwards they will be deleted.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Contact form

Nature and purpose of the processing:

The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional.

Legal basis:

The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).

By providing the contact form, we would like to enable you to contact us easily. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b DSGVO).

Recipient:

Recipients of the data are, if applicable, order processors. Storage period:

Data will be deleted no later than 6 months after the request has been processed.

If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision prescribed or required:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

Use of Google Analytics Nature and purpose of processing:

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these web pages, your IP address will be stored by Google within

Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full

IP address to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose ofevaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The purposes of the data processing are to evaluate the use of the website and to compile reports on activities on the website. Other related services are then to be provided based on the use of the website and the internet.

Legal basis:

The processing of the data is based on the user’s consent (Art. 6 para. 1 lit. a DSGVO). Recipient:

The recipient of the data is Google as an order processor. We have concluded the corresponding order processing agreement with Google for this purpose.

Storage period:

Data is deleted as soon as it is no longer required for our recording purposes. Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Withdrawal of consent:

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

can. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This will create a

Opt-out cookie installed on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

Profiling:

With the help of the tracking tool Google Analytics, the behaviour of visitors to the website can be assessed and interests analysed. For this purpose, we create a pseudonymous user profile.

Use of script libraries (Google Web Fonts) Nature and purpose of the processing:

In order to display our content correctly and graphically across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts on this website.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google Webfonts and the a s s o c i a t e d data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – although it is currently unclear whether and for what purposes – that the operator collects Google data in this case.

Storage period:

We do not collect any personal data through the integration of Google Web Fonts.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of personal data is neither legally nor contractually required. However, the correct display of the content may not be possible due to standard fonts.

Withdrawal of consent:

The programming language JavaScript is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

Use of Adobe Typekit Nature and purpose of the processing:

We use Adobe Typekit for the visual design of our website. Typekit is a service provided by Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter “Adobe”), which gives us access to a font library. To integrate the fonts we use, your browser must establish a connection to an Adobe server in the USA and download the font required for our website. Adobe thereby receives the information that your IP address was used to access our website. Further information on Adobe Typekit can be found in Adobe’s privacy policy, which you can access here: https://www.adobe.com/de/privacy/policy.html.

Legal basis:

The legal basis for the integration of Adobe Typekit and the associated data transfer to Adobe is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. Information about the use of your data by Adobe Typekit Web Fonts can be found at https://typekit.com/ and in the Adobe Typekit privacy policy: https://www.adobe.com/de/privacy/policies/typekit.html.

Storage period:

We do not collect any personal data through the integration of Adobe Typekit Web Fonts. Third country transfer:

Adobe is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

Provision prescribed or required:

The provision of personal data is neither legally nor contractually required. However, the correct display of the contents of standard fonts cannot be made possible without it.

Use of Google Maps Nature and purpose of the processing:

We use the Google Maps service on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

You can find more detailed information about the data processing by Google in the

Google privacy policy. There you can also change your personal data protection settings in the data protection centre.

You can find detailed instructions on managing your own data in connection with Google products here.

Legal basis:

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:

When you visit the website, Google receives information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not wish to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as usage profile and uses it for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

Storage period:

We do not collect any personal data through the integration of Google Maps. Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Embedded YouTube videos Nature and purpose of the processing:

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter referred to as YouTube).

“YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account first.

When a YouTube video is started, the provider uses cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider’s privacy policy, where you will also find further information on your rights in this regard and settings options for protecting your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis:

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:

Calling up YouTube automatically triggers a connection to Google.

Storage period and revocation of consent:

Those who have deactivated the storage of cookies for the Google Ad programme will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser.

For further information on data protection at “YouTube” find the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Google AdWords

Nature and purpose of the processing:

Our website uses Google Conversion Tracking. The company operating the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have accessed our website via an ad placed by Google, Google AdWords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie.

Cookies can therefore not be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identificate users.

Legal basis:

The legal basis for the integration of Google AdWords and the a s s o c i a t e d data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:

Whenever you visit our website, personal data, including your name, address, telephone number, email address and

IP address is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.

Our company does not contain any information from Google by means of which the data subject could be identified.

Storage period:

These cookies lose their validity after 30 days and are not used for personal identification. Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Withdrawal of consent:

If you do not wish to participate in the tracking, you can refuse the setting of a cookie required for this – for example, by means of a browser setting that generally deactivates the automatic setting of cookies or by setting your browser so that cookies from the domain “googleleadservices.com” can be blocked.

Please note that you must not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Use of Google Remarketing Nature and purpose of the processing:

This website uses the remarketing function of Google Inc. The operator of the Google Remarketing services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognise the visitor when they visit websites that belong to the Google advertising network. On these pages, the visitor can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google’s remarketing function.

Legal basis:

The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:

Whenever you visit our website, personal data, including your name, address, telephone number, email address and

IP address is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.

Our company does not contain any information from Google by means of which the data subject could be identified.

Withdrawal of consent:

According to its own information, Google does not collect any personal data during this process. However, if you do not wish to use Google’s remarketing function, you can deactivate it in principle by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

Provision prescribed or required:

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Change to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

Questions to the Data Protection Officer

If you have any questions about data protection, please write us an email or c o n t a c t the person responsible for data protection in our organisation directly:

info@flegisto.com