In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. There is no automated decision-making in individual cases, including profiling.
Provision of the website
Type and scope of processing
When you open and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a “log file”:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
Our website is not hosted by us, but by a service provider who, for the purpose of providing the website, uses the aforementioned data on our behalf pursuant to Art. 28 GDPR.
Purpose and legal basis
Processing is performed to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6(1f) GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. A right to object to the processing does not exist due to the exception pursuant to Art. 21(1) GDPR. Insofar as the more extensive storage of log files is required by law, the processing is carried out on the basis of Art. 6(1c) GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our website without providing the data.
Storage period
The aforementioned data will be stored for the duration of the display of the website and for a maximum of 7 days beyond that for technical reasons.
Contact form
Type and scope of processing
On our website, we offer you the option to contact us via a form provided. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you consider necessary for processing the contact request.
When using the contact form, your personal details will only be passed on to the third parties mentioned above under the section “Who gets my data?”.
Purpose and legal basis
The processing of your data by using our contact form takes place for the purpose of communication and processing your request on the basis of your consent pursuant to Art. 6(1a) GDPR. If your request relates to an existing contractual relationship with us, the processing for the purpose of fulfilling the contract is carried out on the basis of Art. 6(1b) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide these data, please contact us by other means.
Storage period
Insofar as you use the contact form on the basis of your consent, we store the collected data of each request for a period of three years, starting from the completion of your request or until the revocation of your consent.
If you use the contact form within the framework of a contractual relationship, we store the data collected for each request for a period of three years from the end of the contractual relationship.
Press distribution list
Type and scope of processing
If you sign up on our website to receive our press distribution list, we will collect your email address and store this information together with the date of registration and your IP address.
When using the contact form to register for the press distribution list, your personal details will only be passed on to the third parties mentioned above under the section “Who gets my data?", who will also take care of sending the newsletter.
Purpose and legal basis
We process your data for the purpose of the press distribution list on the basis of your consent pursuant to Art. 6(1a) GDPR. By unsubscribing from the newsletter, you can revoke your consent at any time with effect for the future pursuant to Art. 7(3) GDPR. There is no legal or contractual obligation to provide your data, however, it is not possible to send the press distribution list without providing your data.
Storage period
After successful confirmation, we will store your data until your consent is revoked.
AWS S3
Type and scope of processing
We use AWS S3 to properly provide the content of our website. AWS S3 is a service of Amazon Web Services, Inc., which acts as a content delivery network (CDN) on our website.
A CDN contributes to the faster provision of content from our online offer, in particular files such as graphics or scripts, by using regionally or internationally distributed servers. When you access this content, you connect to servers of Amazon Web Services, Inc., whereby your IP address and, if applicable, browser data such as your user agent are transmitted. These data will only be processed for the above purposes and to maintain the security and functionality of AWS S3.
Purpose and legal basis
The use of the content delivery network occurs on the basis of our legitimate interests, i.e., interest in a secure and efficient provision as well as the optimisation of our online offer pursuant to Art. 6(1f) GDPR.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Amazon Web Services, Inc. Please refer to the AWS S3 Privacy Policy for more information: https://aws.amazon.com/privacy/.
Google CDN
Type and scope of processing
We use Google CDN to properly provide the content of our website. Google CDN is a service of Google Ireland Limited, which acts as a content delivery network (CDN) on our website.
A CDN contributes to the faster provision of content from our online offer, in particular files such as graphics or scripts, by using regionally or internationally distributed servers. When you access this content, you connect to servers of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. These data will only be processed for the above purposes and to maintain the security and functionality of Google CDN.
Purpose and legal basis
The use of the content delivery network occurs on the basis of our legitimate interests, i.e., interest in a secure and efficient provision as well as the optimisation of our online offer pursuant to Art. 6(1f) GDPR.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Please refer to the Google CDN Privacy Policy for more information: https://policies.google.com/privacy.
Note:
The data will also be transferred to Google’s servers in the USA and, if necessary, further processed by Google for its own purposes. It cannot be ruled out that state authorities in the USA may have access to these data. Since we have activated IP anonymisation on our website, your IP address will first be truncated by Google within the territory of the Member States of the European Union. Only in exceptional cases will the full IP address be transferred to a Google server in the USA before being truncated. Since there is no high level of data protection in the USA comparable with the EU, we have contractually agreed with Google on the application of the standard contractual clauses published by the EU Commission. This ensures the best possible protection for your personal data.