Skip to main content

Data protection

We are delighted that you are interested in our company.

Privacy and data protection are matters of especially great importance for the JACKON Insulation GmbH management. Visitors are fundamentally able to use the JACKON Insulation GmbH websites without providing any personal data. As soon as visitors want to utilise special services of our company on our internet site, however, it may be necessary for us to process certain personal data. If the processing of personal data is necessary and there is no legal ground for such processing, we obtain the consent of these persons as a basic rule.
The processing of personal data such as the name, address, email address or telephone number of these persons is always carried out in conformity with the General Data Protection Regulation and with the data protection regulations of specific countries as they are applicable to JACKON Insulation GmbH. In issuing this privacy statement, our company would like to inform the general public about the type, scope and purpose of our collection, use and processing of personal data. Moreover, we would like to use this privacy statement to explain to our website users the rights to which they are entitled.
JACKON Insulation GmbH, the party in control of the processing, has implemented numerous technical and organisational measures to secure the most seamless protection possible of the personal data processed via this internet site. Nevertheless, data transmissions via the internet may be vulnerable to security breaches at any time and it is impossible to guarantee absolute protection. Consequently, every visitor to the site may freely decide to communicate personal data to us by alternative means (e.g. by phone).


1. Definition of Terms
The privacy statement of JACKON Insulation GmbH is based on the terms that were used by the European legislative and regulatory body in the adoption of the General Data Protection Regulation (GDPR). Our privacy statement is intended to be easily readable and intelligible for the general public as well as for our customers and business partners. To ensure that this is the case, we would like to begin by defining the terms that are used.
We use the following terms (and others) in this privacy statement:
 a)    Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter: “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
 b)    Data subject
A data subject is any identified or identifiable natural person whose personal data are processed by the party responsible for the processing.
 c)    Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
 d)    Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.
 e)    Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
 f)    Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
 g)    Controller or party in control of processing
Controller or party in control of processing means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. If the purposes and means of such processing are determined by European Union or member state law, the controller or the specific criteria for its nomination may be provided for by European Union or member state law.
 h)    Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
 i)    Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with European Union or member state law are not regarded as recipients.
 j)    Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
 k)    Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.


2. Name and Address of the Controller
Controller within the sense of the General Data Protection Regulation, any other data protection laws in effect in the member states of the European Union and any other provisions having the character of data protection law is:
JACKON Insulation GmbH
Ritzlebener Strasse 1
39619 Arendsee OT. Mechau
Germany
Phone : +49-39036-960-0
Email: info@jackodur.com
Website: www.jackon-insulation.com

3. Name and Address of the Data Protection Officer
The data protection officer of the controller is:
Mark Plate
JACKON Insulation GmbH
Ritzlebener Strasse 1
39619 Arendsee OT. Mechau
Germany
Phone : +49-39036-960-183
Email: mark.plate@jackodur.com
Website: www.jackon-insulation.com
Any data subject may contact our data protection officer at any time with questions and suggestions related to privacy.

4. Cookies
The JACKON Insulation GmbH internet sites use cookies. Cookies are text files that are placed on a computer system by an internet browser and stored there.
Many internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a sequence of characters that can be used to attribute internet sites and servers to the specific internet browser in which the cookie has been stored. It enables the visited internet sites and servers to distinguish the specific browser of the data subject from other internet browsers containing other cookies. A specific internet browser can be recognised and identified via the unique cookie ID.
By using cookies, JACKON Insulation GmbH can provide user-friendlier services to the visitors of its internet site than would be possible without the placement of the cookies.
Thanks to cookies, the information and services on our internet site can be optimised to the benefit of users. As previously mentioned, cookies make it possible for us to recognise the users of our internet site. The purpose of this recognition is to simplify the use of our internet site for the users. Visitors to an internet site that uses cookies, for instance, do not have to re-enter their login data every time they visit the internet site because this task is handled by the internet sites and the cookies that have been placed on the users’ computer systems. Another example is the cookie for a shopping cart in the online shop. The online shop remembers the products that a customer has put in his or her virtual shopping cart with the aid of a cookie.
Data subjects can prevent our internet site from placing cookies on their systems at any time by making the appropriate settings in the internet browsers they use, thus permanently blocking the placement of cookies. Moreover, cookies that have been placed on the system can be deleted at any time by the internet browser or other software programs. This is possible with all of the generally available browsers. If the data subject blocks the placement of cookies in the internet browser he or she is using, it is possible that not all of the functions on our internet site will be available in their full scope.

5. Collection of General Data and Information
The JACKON Insulation GmbH internet site collects various general data and information every time a data subject or an automated system accesses the internet site. These general data and information are stored in the server’s log files. The collected information includes (1) the types and releases of the browsers used, (2) the operating system used by the accessing system, (3) the internet site from which an accessing system is directed to our internet site (so-called referrer), (4) the sub-websites that an accessing system addresses on our internet site, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information that serve to protect our information technology systems in the event of attacks.
JACKON Insulation GmbH does not draw any conclusions about the data subjects from the use of these general data and information. This information is used strictly (1) to deliver the content of our internet site correctly, (2) to optimise the content of our internet site and the advertising for the content, (3) to ensure the sustained functionality of our information technology systems and the technology of our internet site and (4) to provide the information required by criminal prosecutors in the event of a cyber-attack. These data and information, which are collected anonymously, are analysed by JACKON Insulation GmbH for statistical purposes as well as for the purpose of improving data protection and data security in our company so that we can ultimately secure optimum protection for the personal data we process. The anonymous data in the server log files are stored separately from all personal data provided by a data subject.

6. Registration on Our Website
Data subjects have the opportunity to register on the controller’s website by entering personal data. What personal data are transmitted to the controller at this time are determined by the specific entry mask used for the registration. The personal data entered by the data subject are collected and stored solely and exclusively for internal use by the controller and for its own purposes. The controller may transfer the data to one or more processors (e.g. a package service provider) who also use the personal data solely and exclusively for an internal use that is attributable to the controller.
During registration on the controller’s internet site, the IP address assigned to the data subject by the internet service provider (ISP), the date and the time of the registration are also stored. These data are stored because this is the only way to prevent the misuse of our services, and, if necessary, these data make it possible to investigate any criminal acts that have been committed. To this extent, the storage of these data is required for the controller’s security. These data are not transferred to third parties unless there is a statutory obligation to transfer the data or their transfer serves the prosecution of criminal acts.
The registration of data subjects and the personal data they voluntarily provide is used by the controller to offer to data subjects content or services that, because of their nature, can be offered solely to registered users. Registered users are free to request erasure of the personal data they provided during registration from the controller’s databases at any time.
The controller provides information to any data subject on request at any time about the personal data concerning the data subject that have been stored. Moreover, the controller rectifies or erases the personal data at the request of or pursuant to information from the data subject unless prohibited from doing so by statutory retention obligations. All of the controller’s employees act as contacts in this respect for the data subjects.

7. Subscribing to Our Newsletter
Users of the JACKON Insulation GmbH internet site have the opportunity to subscribe to our company’s newsletter. What personal data are transmitted to the controller when ordering the newsletter are determined by the entry mask used for this purpose.
JACKON Insulation GmbH uses a newsletter to send regular information about the company’s products and services to its customers and business partners. Data subjects can receive our company’s newsletter solely if (1) the data subject has a valid email address and (2) the data subject registers for the newsletter. Before the newsletter is sent to an email address that is registered for the first time, legal provisions require the sending of a confirmation email to the data subject as part of the double opt-in procedure. This confirmation email serves to check whether the owner of the email address as the data subject has authorised the receipt of the newsletter.
During the registration for the newsletter, we also store the IP address assigned by the data subject’s internet service provider (ISP) to the computer system being used at the time of the registration as well as the date and time of the registration. The collection of these data is necessary so that the (possible) misuse of a data subject’s email address can be tracked at a later time and consequently serves the legal security of the controller.
The personal data collected in the course of registration for the newsletter are used solely and exclusively for the sending of our newsletter. Moreover, newsletter subscribers can be notified by email if and when this is necessary for the operation of the newsletter service or a related registration as might be the case in the event of changes in the newsletter service or modifications of the technical circumstances. The personal data collected as part of the newsletter service are not transferred to third parties. Data subjects may unsubscribe to the newsletter at any time. The consent to the storage of personal data granted to us by data subjects for sending the newsletter may be withdrawn at any time. Every newsletter contains a link that can be used to withdraw this consent. Moreover, it is possible at any time to unsubscribe from the newsletter directly on the controller’s internet site or to notify the controller of the wish to unsubscribe by other means.

8. Newsletter Tracking
The JACKON Insulation GmbH newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in these types of emails sent in HTML format that enables log file recording and analysis. The information can be used for a statistical analysis of the success or failure of online marketing campaigns. Using the embedded tracking pixels, JACKON Insulation GmbH can determine whether and, if so, when a data subject has opened an email and which of the links in the email have been accessed.
Personal data obtained from the tracking pixels in the newsletter are stored and analysed by the controller for the purposes of optimising newsletter distribution and of tailoring the content of future newsletters even more closely to the interests of the data subject. These personal data are not transferred to third parties. Data subjects are entitled to withdraw at any time their consent given specifically for this purpose during the double opt-in procedure. If consent is withdrawn, the controller will erase these personal data. JACKON Insulation GmbH automatically interprets a request to unsubscribe from the newsletter as a withdrawal of consent.

9. Contact Opportunity on the Internet Site
In compliance with statutory provisions, the JACKON Insulation GmbH internet site contains information that can be used to establish fast electronic contact to our company as well as direct communication with us and includes a general address for so-called electronic mail (email address). Whenever a data subject contacts the controller using email or a contact form, the personal data transmitted by the data subject are automatically stored. Any such personal data transmitted voluntarily by a data subject to the controller are stored for purposes of processing or contacting the data subject. These personal data are not transferred to third parties.

10. Routine Erasure and Blocking of Personal Data
The controller processes and stores personal data from the data subject solely for the time period that is required to achieve the purpose of the storage or for the period set forth in law or regulations issued by the European legislative and regulatory body or another legislative body to which the controller is subject.
If and when the purpose of the storage ceases to exist or if and when a retention period prescribed by the European legislative and regulatory body or by another authoritative legislative body expires, the personal data are blocked or erased as a matter of routine and in accordance with legal provisions.

11. Rights of the Data Subject
 a)    Right of confirmation
The European legislative and regulatory body has established for the data subject the right to obtain from the controller confirmation as to whether or not personal data concerning the data subject are being processed. If a data subject wishes to exercise this right of confirmation, he or she may contact one of the controller’s employees at any time.
 b)    Right of access
The data subject has the right established by the European legislative and regulatory body to obtain at any time information, free of charge, from the controller regarding the personal data concerning him or her stored by the controller. Moreover, the European legislative and regulatory body has established the data subject’s right to obtain access to the following information:
The purposes of the processing
The categories of personal data concerned
The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
 Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
 The existence of the right to request rectification or erasure of the personal data concerning the data subject or restriction of processing by the controller or to object to such processing
The right to lodge a complaint with a supervisory authority
Where personal data have not been obtained from the data subject: all available information concerning the origin of the data
The existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject
Moreover, the data subject has the right to obtain information as to whether personal data are transferred to a third country or an international organisation. To the extent this is the case, the data subject otherwise is entitled to obtain information regarding the appropriate safeguards related to the transfer.
If a data subject wishes to exercise this right of access, he or she may contact one of the controller’s employees at any time.
 c)    Right to rectification
The data subject has the right established by the European legislative and regulatory body to obtain without undue delay the rectification of inaccurate personal data concerning him or her. In addition, the data subject has the right, taking into account the purposes of the processing, to have incomplete personal data completed, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, he or she may contact one of the controller’s employees at any time.
 d)    Right to erasure (right to be forgotten)
The data subject has the right established by the European legislative and regulatory body to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies and to the extent the processing is not required:
The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
The data subject withdraws his or her consent on which the processing is based according to point (a) of Art. 6 (1) GDPR or point (a) of Art. 9 (2) GDPR and where there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
The personal data have been unlawfully processed.
The personal data have to be erased for compliance with a legal obligation pursuant to European Union or member state law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.
If and when one of the above grounds applies and a data subject wishes to obtain the erasure of personal data stored at JACKON Insulation GmbH, he or she may contact one of the controller’s employees at any time. The JACKON Insulation GmbH will take the steps necessary to comply with the erasure request without delay.
Where JACKON Insulation GmbH has made the personal data public, and our company as the controller is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, JACKON Insulation GmbH, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data, providing that the processing is not required. JACKON Insulation GmbH employees will initiate the required actions in the specific case.
 e)    Right to restriction of processing
The data subject has the right established by the European legislative and regulatory body to obtain from the controller restriction of processing where one of the following applies:
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
 The controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims.
The data subject has objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If and when one of the above grounds applies and a data subject wishes to obtain the restriction of personal data stored at JACKON Insulation GmbH, he or she may contact one of the controller’s employees at any time. JACKON Insulation GmbH employees will initiate the actions required for the restriction of processing.
 f)    Right to data portability
The data subject has the right established by the European legislative and regulatory body to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. Moreover, he or she has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Art. 6 (1) GDPR or point (a) of Art. 9 (2) GDPR or on a contract pursuant to point (b) of Art. 6 (1) GPDR and the processing is carried out by automated means, provided that processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Moreover, the data subject, in exercising his or her right to data portability pursuant to Art. 20 (1) GDPR, has the right to have the personal data transmitted directly from one controller to another, where technically feasible, and to the extent that this does not adversely affect the rights and freedoms of others.
The data subject may contact an employee of JACKON Insulation GmbH at any time to exercise his or her right to data portability.
 g)    Right to object
The data subject has the right established by the European legislative and regulatory body to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Art. 6 (1) GDPR, including profiling based on those provisions.
JACKON Insulation GmbH will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where JACKON Insulation GmbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to processing of personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the data subject lodges an objection to processing for direct marketing purposes with JACKON Insulation GmbH, JACKON Insulation GmbH will no longer process the personal data for such purposes.
Where JACKON Insulation GmbH processes personal data for scientific or historical research purposes or statistical purposes pursuant to Article 89 (1) GDPR, the data subject, on grounds relating to his or her particular situation, also has the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
The data subject may contact directly any employee of JACKON Insulation GmbH or another employee at any time to exercise his or right to object. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may also exercise his or her right to object by automated means using technical specifications.
 h)    Automated individual decision-making, including profiling
The data subject has the right established by the European legislative and regulatory body not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, provided that the decision (1) is not necessary for entering into, or performance of, a contract between the data subject and a data controller, or (2) is not authorised by European Union or member state law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests or (3) is not based on the data subject’s explicit consent.
If and when the decision (1) is necessary for entering into, or performance of, a contract between the data subject and the controller or (2) is based on the data subject’s explicit consent, JACKON Insulation GmbH will implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If a data subject wishes to exercise his or her rights related to automated decision-making, he or she may contact one of the controller’s employees at any time.
 i)    Right to withdraw consent to processing of personal data
The data subject has the right established by the European legislative and regulatory body to withdraw at any time his or her consent to the processing of personal data.
If a data subject wishes to exercise his or her right to withdraw consent, he or she may contact one of the controller’s employees at any time.

12. Privacy in the Context of Job Applications and the Job Application Procedure
The controller collects and processes personal data of job applicants for the purpose of conducting the job application procedure. Processing can also be done by electronic means. This is in particular the case if and when an applicant submits the relevant application documents by electronic means (such as email or via web form on the internet site) to the controller. If and when the controller concludes an employment contract with an applicant, the transmitted data will be stored in compliance with legal provisions for the purpose of processing the employment relationship. If the controller does not conclude an employment contract with the applicant, the application documents will automatically be erased two months after notification of the negative decision, provided that the controller does not have any other legitimate interests precluding the erasure. Other legitimate interests within this sense include, for instance, the obligation to present evidence in proceedings pursuant to the General Equal Treatment Act (AGG).

13. Privacy Policy Regarding the Integration and Use of Facebook
The controller has integrated components of the company Facebook on this internet site. Facebook is a social network.
A social network is a social meeting point operated on the internet, an online community that as a rule makes it possible for users to communicate and to interact with one another in virtual space. A social network can serve as a platform for sharing opinions and experience or enable the internet community to provide personal or company-related information. Facebook gives users of the social network the opportunity to create private profiles, upload photos and submit friend requests to create a personal network, among other functions.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data when a data subject lives outside of the USA or Canada is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Whenever any one of the separate pages of this internet site that is operated by the controller and on which a Facebook component (Facebook plugin) has been integrated is accessed, the Facebook component automatically causes the internet browser on the data subject’s information technology system to download an icon of the Facebook component from Facebook. A complete overview of all Facebook plugins can be accessed at developers.facebook.com/docs/plugins/. In the course of this technical procedure, Facebook obtains information regarding which specific sub-pages of our internet site the data subject visits.
If the data subject is at the same time logged on to Facebook, Facebook recognises what specific sub-page of our internet site the data subject visits every time our internet site is accessed by the data subject and throughout the entire duration of the data subject’s visit to our internet site. This information is collected by the Facebook component and attributed by Facebook to the relevant Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated on our internet site (by clicking on the “Like” button, for instance) or if the data subject enters a comment, Facebook attributes this information to the data subject’s personal Facebook user account and stores these personal data.
Facebook always receives information from the Facebook component that the data subject has visited our internet site if the data subject is logged on to Facebook at the same time he or she accesses our internet site; this happens regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transferred to Facebook, he or she can prevent the transmission by logging out of his or her Facebook account before accessing our internet site.
The privacy policy published by Facebook, which can be accessed at de-de.facebook.com/about/privacy/, contains information about Facebook’s collection, processing and use of personal data. In addition, it explains the settings Facebook provides for protection of the data subject’s privacy. Moreover, a number of different applications are available that make it possible to block the transfer of data to Facebook. The data subject can use these applications to prevent data transfer to Facebook.

14. Privacy Policy Regarding the Integration and Use of Google+
The controller has integrated the Google+ button as a component of this internet site. Google+ is a so-called social network. A social network is a social meeting point operated on the internet, an online community that as a rule makes it possible for users to communicate and to interact with one another in virtual space. A social network can serve as a platform for sharing opinions and experience or enable the internet community to provide personal or company-related information. Google+ gives users of the social network the opportunity to create private profiles, upload photos and submit friend requests to create a personal network, among other functions.
The operating company of Google+ is Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.
Whenever any one of the separate pages of this internet site that is operated by the controller and on which a Google+ button has been integrated is accessed, the Google+ button automatically causes the internet browser on the data subject’s information technology system to download an icon of the Google+ button from Google. In the course of this technical procedure, Google obtains information regarding which specific sub-pages of our internet site the data subject visits. Detailed information about Google+ can be accessed at developers.google.com/+/.
If the data subject is at the same time logged on to Google+, Google recognises what specific sub-page of our internet site the data subject visits every time our internet site is accessed by the data subject and throughout the entire duration of the data subject’s visit to our internet site. This information is collected by the Google+ button and attributed by Google to the relevant Google+ account of the data subject.
If the data subject activates one of the Google+ buttons integrated on our internet site, thus submitting a Google +1 recommendation, Google attributes this information to the data subject’s personal Google+ user account and stores these personal data. Google stores the data subject’s Google +1 recommendation and makes it publicly accessible in compliance with the related terms and conditions that have been accepted by the data subject. A Google +1 recommendation submitted by the data subject on this internet site is subsequently stored and processed together with other personal data such as the name of the Google +1 account used by the data subject and the photo saved with this account in other Google services such as the search engine results from the Google search engine, the data subject’s Google account or other places such as internet sites or in relation to advertisements. Moreover, Google is able to link the access to this internet site with other personal data stored at Google. Google also records this personal information for the purpose of improving or optimising the various Google services.
Google always receives information from the Google+ button that the data subject has visited our internet site if the data subject is logged on to Google+ at the same time he or she accesses our internet site; this happens regardless of whether the data subject clicks on the Google+ button or not.
If the data subject does not want this information to be transferred to Google, he or she can prevent the transmission by logging out of his or her Google+ account before accessing our internet site.
Additional information and the valid privacy policy at Google can be accessed at www.google.de/intl/de/policies/privacy/. Additional information from Google about the Google +1 button can be found at developers.google.com/+/web/buttons-policy.

15. Privacy Policy Regarding the Integration and Use of Google AdWords
The controller has integrated Google AdWords on this internet site. Google AdWords is a service for internet advertising that enables advertisers to insert advertisements in the Google search engine results and in the Google advertising network. Google AdWords gives advertisers the opportunity to define in advance key words that cause an advertisement to appear in the Google search engine results solely if the user clicks on a search result in the search engine that has relevance to the key words. On the Google advertising network, the advertisements are distributed to internet sites relevant for the subject by means of an automatic algorithm on the basis of the previously defined key words.
The operating company of Google AdWords is Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to advertise our internet site by displaying advertising of relevant interest on the internet sites of third companies and in the search engine results of the Google search engine and to display third-party advertising on our internet site.
If a data subject accesses our internet site from a Google advertisement, Google places a so-called conversion cookie onto the data subject’s information technology system. Cookies were explained above. A conversion cookie expires after thirty days and does not serve to identify the data subject. The conversion cookie, provided it has not yet expired, is used to track whether certain sub-pages, such as the shopping cart of an online shop system, are accessed on our internet site. The conversion cookie enables us as well as Google to determine whether a data subject who accessed our internet site from an AdWords advertisement generated any revenue, i.e. purchased products or cancelled the purchase process.
The data and information collected by the use of the conversion cookie are used by Google to prepare hit statistics for our internet site. We use the hit statistics in turn to determine the total number of visitors who are directed to us by AdWords advertisement, i.e., to determine the success or failure of a specific AdWords advertisement and to optimise our AdWords advertisements for the future. Neither our company nor any other advertising customers of Google AdWords receive any information from Google that could be used to identify the data subject.
Personal information such as the internet sites accessed by the data subject are stored by means of the conversion cookie. Personal data, including the IP address of the internet connection used by the data subject, are transmitted to Google in the United States of America during every visit to our internet sites. These personal data are stored by Google in the United States of America. Under certain circumstances, Google transfers these personal data collected by the technical process to third parties.
As described above, data subjects can prevent our internet site from placing cookies on their systems at any time by making the appropriate settings in the internet browsers they use and permanently blocking the placement of cookies. This setting in the internet browser being used would also prevent Google from placing a conversion cookie on the data subject’s information technology system. Moreover, any cookie that Google AdWords has already placed can be erased by the internet browser or other software programs.
Furthermore, the data subject has the opportunity to object to interest-related advertising by Google. To do so, the data subject must click on the link www.google.de/settings/ads from every internet browser he or she uses and make the desired settings here.
Additional information and the valid privacy policy at Google can be accessed at www.google.de/intl/de/policies/privacy/.

16. Privacy Policy Regarding the Integration and Use of Instagram
The controller has integrated components of the Instagram service on this internet site. Instagram is a service that is to be classified as an audio-visual platform and that enables users to share photos and videos as well as to disseminate such data in other social networks.
Operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14, First Floor, Menlo Park, CA, USA.
Whenever any one of the separate pages of this internet site that is operated by the controller and on which an Instagram component (Insta button) has been integrated is accessed, the Instagram component automatically causes the internet browser on the data subject’s information technology system to download an icon of the corresponding component from Instagram. In the course of this technical procedure, Instagram obtains information regarding which specific sub-pages of our internet site the data subject visits.
If the data subject is at the same time logged on to Instagram, Instagram recognises what specific sub-page the data subject visits every time our internet site is accessed by the data subject and throughout the entire duration of the data subject’s visit to our internet site. This information is collected by the Instagram component and attributed by Instagram to the relevant Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated into our internet site, the data and information that are transmitted are attributed to the data subject’s personal Instagram user account and stored and processed by Instagram.
Instagram always receives information from the Instagram component that the data subject has visited our internet site if the data subject is logged on to Instagram at the same time he or she accesses our internet site; this happens regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want this information to be transferred to Instagram, he or she can prevent the transmission by logging out of his or her Instagram account before accessing our internet site.
Additional information and the valid privacy policy at Instagram can be accessed at help.instagram.com/155833707900388 and www.instagram.com/about/legal/privacy/.

17. Privacy Policy Regarding the Integration and Use of LinkedIn
The controller has integrated components of the LinkedIn Corporation on this internet site. LinkedIn is an internet-based social network that enables users to connect to current business contacts as well as to establish new business contacts. More than 400 million users are registered on LinkedIn in more than 200 countries, making LinkedIn the largest platform for business contacts and one of the most frequently visited internet sites in the world.
The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is in charge of privacy issues outside of the USA.
Every time a page of our internet site that contains a LinkedIn component (LinkedIn plugin) is accessed, this component causes the browser used by the data subject to download the appropriate icon for the component from LinkedIn. Additional information about the LinkedIn plugins can be obtained at developer.linkedin.com/plugins. In the course of this technical procedure, LinkedIn obtains information regarding which specific sub-pages of our internet site the data subject visits.
If the data subject is at the same time logged on to LinkedIn, LinkedIn recognises what specific sub-page of our internet site the data subject visits every time our internet site is accessed by the data subject and throughout the entire duration of the data subject’s visit to our internet site. This information is collected by the LinkedIn component and attributed by LinkedIn to the relevant LinkedIn account of the data subject. If the data subject activates one of the LinkedIn buttons integrated on our internet site, LinkedIn attributes this information to the data subject’s personal LinkedIn user account and stores these personal data.
LinkedIn always receives information from the LinkedIn component that the data subject has visited our internet site if the data subject is logged on to LinkedIn at the same time he or she accesses our internet site; this happens regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject does not want this information to be transferred to LinkedIn, he or she can prevent the transmission by logging out of his or her LinkedIn account before accessing our internet site.
LinkedIn offers settings for unsubscribing to email messages, text messages and targeted advertising and for managing advertising settings at www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame that may place cookies. These cookies can be blocked at www.linkedin.com/legal/cookie-policy. The current LinkedIn privacy policy can be accessed at www.linkedin.com/legal/privacy-policy. The LinkedIn cookie policy can be accessed at www.linkedin.com/legal/cookie-policy.

18. Privacy Policy Regarding the Integration and Use of Pinterest
The controller has integrated components of Pinterest, Inc. on this internet site. Pinterest is a so-called social network. A social network is a social meeting point operated on the internet, an online community that as a rule makes it possible for users to communicate and to interact with one another in virtual space. A social network can serve as a platform for sharing opinions and experience or enable the internet community to provide personal or company-related information. Among other functions, Pinterest enables users of the social network to publish photo collections and single pictures as well as descriptions on virtual bulletin boards (so-called pinning), which can then be shared with (so-called repinning) or commented on by other users.
The operating company of Pinterest is Pinterest, Inc., 808 Brannan Street, San Francisco, CA 94103, USA.
Whenever any one of the separate pages of this internet site that is operated by the controller and on which a Pinterest component (Pinterest plugin) has been integrated is accessed, the Pinterest component automatically causes the internet browser on the data subject’s information technology system to download an icon of the Pinterest component from Pinterest. More information about Pinterest can be accessed at pinterest.com. In the course of this technical procedure, Pinterest obtains information regarding which specific sub-pages of our internet site the data subject visits.
If the data subject is at the same time logged on to Pinterest, Pinterest recognises what specific sub-page of our internet site the data subject visits every time our internet site is accessed by the data subject and throughout the entire duration of the data subject’s visit to our internet site. This information is collected by the Pinterest component and attributed by Pinterest to the relevant Pinterest account of the data subject. If the data subject activates one of the Pinterest buttons integrated on our internet site, Pinterest attributes this information to the data subject’s personal Pinterest user account and stores these personal data.
Pinterest always receives information from the Pinterest component that the data subject has visited our internet site if the data subject is logged on to Pinterest at the same time he or she accesses our internet site; this happens regardless of whether the data subject clicks on the Pinterest component or not. If the data subject does not want this information to be transferred to Pinterest, he or she can prevent the transmission by logging out of his or her Pinterest account before accessing our internet site.
The privacy policy published by Pinterest, which can be accessed at about.pinterest.com/privacy-policy, contains information about Pinterest’s collection, processing and use of personal data.

19. Privacy Policy Regarding the Integration and Use of Twitter
The controller has integrated components of Twitter on this internet site. Twitter is a multilingual, publicly accessible microblogging service on which users can post and disseminate so-called tweets (short messages) that are limited in length to 140 characters. These short messages can be accessed by anyone, including persons who are not registered at Twitter. The tweets, however, are displayed to the so-called followers of a user. Followers are other Twitter users who follow the tweets of a certain user. Moreover, Twitter uses hashtags, links or retweets to address a broad audience.
The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Whenever any one of the separate pages of this internet site that is operated by the controller and on which a Twitter component (Twitter button) has been integrated is accessed, the Twitter component automatically causes the internet browser on the data subject’s information technology system to download an icon of the corresponding Twitter component from Twitter. Additional information about the Twitter buttons can be obtained at about.twitter.com/de/resources/buttons. In the course of this technical procedure, Twitter obtains information regarding which specific sub-pages of our internet site the data subject visits. The purpose of the integration of the Twitter component is to enable our users to disseminate further the content of this internet site, to create awareness of the internet site in the digital world and to increase the number of hits on our site.
If the data subject is at the same time logged on to Twitter, Twitter recognises what specific sub-page of our internet site the data subject visits every time our internet site is accessed by the data subject and throughout the entire duration of the data subject’s visit to our internet site. This information is collected by the Twitter component and attributed by Twitter to the relevant Twitter account of the data subject. If the data subject clicks on one of the Twitter buttons integrated into our internet site, the data and information that are transmitted are attributed to the data subject’s personal Twitter user account and stored and processed by Twitter.
Twitter always receives information from the Twitter component that the data subject has visited our internet site if the data subject is logged on to Twitter at the same time he or she accesses our internet site; this happens regardless of whether the data subject clicks on the Twitter component or not. If the data subject does not want this information to be transferred to Twitter, he or she can prevent the transmission by logging out of his or her Twitter account before accessing our internet site.
The current Twitter privacy policy can be accessed at twitter.com/privacy.

20. Privacy Policy Regarding the Integration and Use of XING
The controller has integrated components of XING on this internet site. XING is an internet-based social network that enables users to connect to current business contacts as well as to establish new business contacts. Each user can set up a personal profile for himself or herself on XING. For instance, companies can create a company profile or publish positions vacant on XING.
The operating company of XING is XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany.
Whenever any one of the separate pages of this internet site that is operated by the controller and on which a XING component (XING plugin) has been integrated is accessed, the XING component automatically causes the internet browser on the data subject’s information technology system to download an icon of the XING component from XING. Additional information about the XING plugins can be obtained at dev.xing.com/plugins. In the course of this technical procedure, XING obtains information regarding which specific sub-pages of our internet site the data subject visits.
If the data subject is at the same time logged on to XING, XING recognises what specific sub-page of our internet site the data subject visits every time our internet site is accessed by the data subject and throughout the entire duration of the data subject’s visit to our internet site. This information is collected by the XING component and attributed by XING to the relevant XING account of the data subject. If the data subject activates one of the XING buttons integrated on our internet site (e.g. the “Share” button), XING attributes this information to the data subject’s personal XING user account and stores these personal data.
XING always receives information from the XING component that the data subject has visited our internet site if the data subject is logged on to XING at the same time he or she accesses our internet site; this happens regardless of whether the data subject clicks on the XING component or not. If the data subject does not want this information to be transferred to XING, he or she can prevent the transmission by logging out of his or her XING account before accessing our internet site.
The privacy policy published by XING, which can be accessed at www.xing.com/privacy, contains information about XING’s collection, processing and use of personal data. In addition, XING has published privacy tips for the XING Share button at www.xing.com/app/share.

21. Privacy Policy Regarding the Integration and Use of YouTube
The controller has integrated components of YouTube on this internet site. YouTube is an internet video portal that allows video publishers to upload video clips free of charge and other users to view, rate and comment on these clips free of charge as well. YouTube allows publication of all types of videos which is why complete films and television shows as well as music videos, trailers or videos users have made themselves can be accessed via this internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC, is a subsidiary of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.
Whenever any one of the separate pages of this internet site that is operated by the controller and on which a YouTube component (YouTube video) has been integrated is accessed, the YouTube component automatically causes the internet browser on the data subject’s information technology system to download an icon of the corresponding YouTube component from YouTube. Additional information about YouTube can be accessed at www.youtube.com/yt/about/de/. In the course of this technical procedure, YouTube and Google obtain information regarding which specific sub-pages of our internet site the data subject visits.
If the data subject is at the same time logged on to YouTube, YouTube recognises what specific sub-page of our internet site the data subject is visiting whenever a sub-page that contains a YouTube video is accessed. This information is collected by YouTube and Google and attributed to the relevant YouTube account of the data subject.
YouTube and Google always receive information from the YouTube component that the data subject has visited our internet site if the data subject is logged on to YouTube at the same time he or she accesses our internet site; this happens regardless of whether the data subject clicks on the YouTube component or not. If the data subject does not want this information to be transferred to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our internet site.
The privacy policy published by YouTube, which can be accessed at www.google.de/intl/de/policies/privacy/, contains information about YouTube and Google’s collection, processing and use of personal data.

22. Use of Matomo

Data is collected and stored on this website using Matomo web analytics software (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand (“Matomo”), based on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes as defined in Art. 6 (1) (f) GDPR. Pseudonymised user profiles can be derived from this data and evaluated for the same purposes.

Cookies may be used for this purpose. Cookies are small text files that are embedded locally in the cache of a visitor’s internet browser. Cookies enable recognition of the internet browser, among other things. The data collected using Matomo technology (including your pseudonymised IP address) is processed on our servers.

The information generated by the cookie in the pseudonymised user profile is not used to personally identify a visitor to this website nor is it collated with personal data about the person behind the pseudonym.

If you do not consent to this data being stored and evaluated, you can object to the storage and utilisation at any time by mouse click below. If you do so, an opt-out cookie will be embedded in your browser that will prevent Matomo from collecting any session data whatsoever. Please bear in mind that complete deletion of all cookies on your part will also result in the opt-out cookie being erased. You will then need to reactivate it.

23. Legal Ground of Processing
Point (a) of Art. 6 (1) GDPR serves our company as the legal ground for processing activities for which we have obtained consent for a specific processing purpose. If processing is necessary for the performance of a contract to which the data subject is party, as is the case, for instance, when processing is required for the delivery of products or the performance of another service or counterperformance, the processing is based on point b of Art. 6 (1) GDPR. The same applies to processing required to take steps prior to entering a contract, e.g. when queries about our products or services are received. If our company is subject to a legal obligation that requires the processing of personal data, e.g. compliance with tax obligations, the processing is based on point (c) of Art. 6 (1) GDPR. In rare cases, the processing of personal data may be necessary to protect vital interests of the data subject or another natural person. This would be the case, for instance, if a visitor to our facility were injured and his name, age, health insurance data and other vital information had to be transferred to a physician, a hospital or other third party. The processing would then be based on point (d) of Art. 6 (1) GDPR. Finally, processing could be based on point (f) of Art. 6 (1) GDPR. Processing that is not covered by any of the aforementioned legal grounds is based on this legal provision if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject. We are permitted to carry out such processing activities in particular because they have been specifically mentioned by the European legislative body. This body took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence GDPR).

24. Processing Necessary for the Pursuit of Legitimate Interests by the Controller or a Third Party
If the processing of personal data is based on point (f) of Article 6 GDPR, our legitimate interest is the conduct of our business activities to the benefit of all our employees and our shareholders.

25. Duration of the Storage of Personal Data
Criterion for the duration of storage of personal data is the statutory retention period applicable in the specific case. Upon the expiration of the period, the relevant data are routinely erased, provided they are no longer necessary for contract performance or initiation.

26. Statutory or Contractual Requirements for Provision of Personal Data; Necessity for Conclusion of Contract; Obligation of the Data Subject to Provide Personal Data; Possible Consequences of Failure to Provide Data
We want to point out to you that the provision of personal data is in part prescribed by law (e.g. tax provisions) or can result from contractual regulations (e.g. information about the party to the contract). The conclusion of a contract may at times make it necessary for a data subject to provide personal data to us that we will subsequently have to process. A data subject is required to provide personal data to us, for instance, if our company concludes a contract with him or her. The failure to provide the personal data would have the consequence that the contract could not be concluded with the data subject. Before the data subject provides personal data, the data subject must contact one of our employees. Our employee will, in the context of the specific case, explain to the data subject whether the provision of the personal data is prescribed by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data and what consequences the failure to provide the personal data would have.

27. Automated Decision-making
Since we as a company are aware of our responsibilities, we do not utilise any automated decision-making or profiling.

Your project at #qboard