Data protection notice.
Name and address of the controller
The controller according to the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection law provisions is:
promeos GmbH
Gießener Straße 14
90427 Nuremberg
Germany
phone: +49 911 377 367 – 0
fax: +49 911 377 367 – 20
e-mail: info(at)promeos.com
Managing partner: Dr. Jochen Volkert
Company headquarters: Nuremberg
Jurisdiction: Nuremberg District Court HRB 28347
VAT ID: DE 813690839
Responsible for content according to Section 55 (2) of the Interstate Treaty on Broadcasting (RStV):
Dr. Jochen Volkert
(hereinafter referred to as “we”, “us” or “our”)
Name and address of our Data Protection Officer
In case of questions, comments, complaints, and requests for information related to our data protection statement and the processing, use, and storage of personal data concerning you, please contact our Data Protection Officer, Mr. Thomas Sturm, by e-mail at datenschutz@promeos.com
Sven Lünke
Sepire GmbH
Georg-Löhlein-Straße 7
90530 Wendelstein
Data processing when accessing our website
Logfile storage
When accessing our website, the browser used on your device automatically sends information to the server hosting our website. This information is temporarily stored in a logfile. In this process, the following information is recorded, with no action on your part, and stored until it is automatically erased after the browser is closed:
IP address of the requesting computer Date and time of access Name and URL of the acchttps://promeos.com/wp-admin/post-new.php?lang=en&post_type=page&trid=3&source_lang=de#essed file Website from which the access took place (referrer URL) The browser that was used, possibly your computer’s operating system, and the name of your access provider
Legal basis
The legal basis for data processing is sentence 1, point (f) of Art. 6(1) GDPR. Our legitimate interests follow from the data collection purposes listed below.
Purpose
The aforementioned data are processed by us for the following purposes:
- Ensuring the smooth establishment of a connection to the website
- Ensuring the convenient use of our website
- Evaluating system security and stability
- Other administrative purposes
Social media
Type and purpose of processing:
Social plugins of the providers listed below are used on our website. You can recognize the plugins by their identification with the corresponding logo.
Under certain circumstances, information that may also include personal data can be sent via these plugins to the operator of the respective service, and may be used by them. We prevent the unknowing and unwanted recording and transfer of data to the service provider with a 2-click solution. In order to activate a certain social plugin, it first has to be enabled by clicking the corresponding button. Only this activation of the plugin triggers the recording of information and its transfer to the service provider. We ourselves do not collect any personal data by means of the social plugins or about their use.
We have no influence on what data are collected by an activated plugin, nor on how the data are used by the provider. At this time, it must be assumed that a direct connection is established to the services of the provider, and that at least the IP address and device-specific information are recorded and used. It is also possible that service providers may attempt to store cookies on the computer being used. To determine the concrete data recorded in this process and how they are used, please see the data protection notice of the respective service provider. Notice: If you are logged on to Facebook at the same time, Facebook can identify you as a visitor on a specific page.
We have integrated the social media buttons of the following companies on our website:
Data protection notice for Facebook
This website uses social media functions of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. You can share content through the Facebook social network using integrated Facebook Like buttons. The legal basis for processing the data in accordance with point (f) of Art. 6(1) GDPR is the legitimate interest in optimizing the website. When a page with an integrated Facebook Like button is accessed, a connection is generally established between the browser being used and the Facebook servers. In order to prevent this immediate connection, this website uses a solution that ensures this transfer takes place only after activating the Facebook Like button. Data are transferred to Facebook only when the Facebook Like button is activated the second time. If you have a Facebook account, these data can be linked with your account. To prevent the assignment of these data to your Facebook account, log off Facebook and delete cookies from your browser before visiting our page. For more information about data protection by Facebook, visit https://de-de.facebook.com/privacy/explanation.
XING Plugin
Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
A connection to the XING servers is established when a page with integrated XING functions is accessed. To the best of our knowledge, no storage of personal data takes place in this process. IP addresses are not stored, and there is no analysis of user behavior.
For details about data protection and the XING Share button, see the XING data protection notice at: https://www.xing.com/app/share?op=data_protection.
We maintain an online profile with LinkedIn to present our company and services, and to communicate with customers/prospects. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
In this regard, please note that user data may be processed outside the European Union, in particular in the USA. This may result in increased risks for users, for example because subsequent access to the user data could be more difficult. Also we have no access to these user data. Only LinkedIn has access.
You will find the LinkedIn data privacy statement at
https://www.linkedin.com/legal/privacy-policy
Google Maps
Description and scope of data processing
This site uses the web mapping service Google Maps through an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Storing your IP address is necessary to use the functions of Google Maps. As a rule, this information is transferred to a Google server and stored there. The operator of this site has no influence on this data transfer. Further information on the handling of user data is found in Google’s data protection notice: https://www.google.de/intl/de/policies/privacy/
Legal basis for data processing
Google Maps is used in the interest of an appealing presentation of our online offers and to make locations named by us on the website easy to find. This constitutes a legitimate interest according to point (f) of Art. 6(1) GDPR.
Your right to object
You have a right to object to the formation of these user profiles by Google. Please contact Google to exercise this right. The Google terms of use are found under https://www.google.com/intl/de_de/help/terms_maps.html.
See Google’s data protection notice for further information about the purpose and scope of data collection and processing by Google. There you will also find further information about your related rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.
We have concluded a data processing agreement with Google Inc.
Google Analytics
Type and purpose of processing:
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses what are known as “cookies” – text files stored on your computer – for the purpose of analyzing the way you use the website. The information generated by the cookies regarding your use of this website is generally transmitted to a Google server in the USA where it is stored. Due to the activation of IP anonymization on this website, your IP address within member states of the European Union or other states in the European Economic Area is however first shortened by Google. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the website operator in order to analyze your use of the website, to prepare reports about website activities, and to provide further services tied to website usage and Internet usage for the website operator. The IP address transferred by your browser in the context of Google Analytics is not combined with other data by Google.
Data processing is for the purpose of analyzing the use of the website and compiling reports about activities on the website. Additional, related services are then provided based on the use of the website and the Internet.
Legal basis:
Data processing is carried out with the user’s consent (point (a) of Art. 6(1) GDPR).
Recipients:
The data recipient is Google as the processor. We have concluded a corresponding data processing agreement with Google for this purpose.
Storage duration:
The data are erased as soon as they are no longer required for our records.
Prescribed or mandatory provision:
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in a limitation of functionality on the website.
Revocation of consent:
You can prevent the storage of cookies by changing your browser settings accordingly. However, please note that you may not be able to fully utilize all functions of this website in that case. Furthermore, you can prevent the capture of data (including your IP address) generated by the cookie and related to your use of the website by Google as well as the processing of these data by Google by downloading and installing the browser plug-in available under the following link: .
In addition or as an alternative to the browser add-on, your can prevent tracking by Google Analytics on our website by deactivating it here:
This installs an opt-out cookie on your device. It prevents data capture by Google Analytics for this website and this browser with future effect as long as the cookie remains installed in your browser.
Profiling:
The tracking tool Google Analytics can be used to evaluate the behavior of visitors to the website and analyze their interests. We create a user profile under a pseudonym for this purpose.
Contact form/call-back form
Type and purpose of processing:
The data entered by you are stored for the purpose of individual communication with you. A valid e-mail address, your name, and your telephone number must be provided. This information is used for the assignment of the inquiry and subsequently responding to the same. Providing additional data is optional.
Legal basis:
The data entered in the contact form/call-back form are processed on the basis of a legitimate interest (point (f) of Art. 6(1) GDPR).
We provide the contact form/call-back form so you can contact us easily. The information you provide is stored in order to process your inquiry and for possible follow-up questions.
When you contact us to request an offer, the data entered in the contact form/call-back form are processed in order to take steps prior to entering into a contract (point (b) of Art. 6(1) GDPR).
Recipients:
The data may be provided to processors.
Storage duration:
Data are erased no later than 6 months after processing the inquiry..
Data are erased no later than 6 months after processing the inquiry.
After entering into a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and erase your data after the end of these retention periods.
Prescribed or mandatory provision:
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address, and the reason for your inquiry.
Data protection requests according to Art. 12 ff. GDPR
Legal basis
The legal basis for processing your personal data and that of your company’s contact persons in the course of handling an inquiry under data protection law (“data protection request”) is Art. 6(1) in conjunction with Art. 12 ff. GDPR. The legal basis for the subsequent documentation of handling the data protection request in compliance with the law is point (f) of Art. 6(1) GDPR.
Purpose
The purpose of processing the personal data within the scope of handling data protection requests is responding to the inquiry under data protection law. Subsequent documentation of handling the data protection request in compliance with the law is for the purpose of demonstrating compliance as required by law (Art. 5(2) GDPR).
Storage duration
The personal data are erased as soon as they are no longer needed to achieve the purpose for which they were collected. In the case of handling data protection requests, this is three years after the end of the respective process according to Section 41 of the Federal Data Protection Act (BDSG) in conjunction with no. 1 of Section 31(2) of the Administrative Offenses Act (OWiG).
Right to objection and erasure
You can object to the processing of personal data concerning you in the course of handling data protection requests at any time with future effect. However, we cannot process your inquiry under data protection law further in this case.
Documentation of handling the respective data protection request in compliance with the law is mandatory. Consequently there is no option for you to object.
Exercise or defense of legal claims
Legal basis
The legal basis for processing your personal data and that of your company’s contact persons in the course of the exercise or defense of legal claims is point (f) of Art. 9(2); point (f) of Art. 6(1) GDPR.
Purpose
The purpose of processing personal data in the course of the exercise or defense of legal claims is to defend against unjustified claims and to legally assert and enforce claims and rights.
Storage duration
The personal data are erased as soon as they are no longer needed to achieve the purpose for which they were collected.
Right to objection and erasure
Processing your personal data in the course of the exercise or defense of legal claims is indispensable for the exercise or defense of legal claims. Consequently there is no option to object.
Rights of the data subject
If your personal data or that of your company’s contact persons are processed by us, you or your company’s contact person is a data subject according to the GDPR. A data subject has the following rights in relation to us:
Right to information
According to Art. 15 GDPR, you have the right request information about personal data concerning you processed by us. In particular, you can request information about the purposes of processing, the category of the personal data, the categories of recipients to whom your data were or are being disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing, or right to object, the existence of the right to file a complaint, the origins of your data insofar as they were not collected by us, and the existence of automated decision making including profiling, and where applicable informative disclosure of the relevant details.
Right to rectification
According to Art. 16 GDPR, you have the right to request the rectification of inaccurate and the completion of incomplete personal data concerning you data and stored by us, without undue delay.
Right to erasure
According to Art. 17 GDPR, you have the right to request from us the erasure of personal data concerning you and stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for archiving purposes in the public interest, or for the establishment, exercise or defense of legal claims.
Right to the restriction of processing
According to Art. 18 GDPR, you have the right to request the restriction of processing of personal data concerning you insofar as the accuracy of the personal data is contested by you, processing is unlawful but you oppose their erasure, and we no longer need the data but they are required by you for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR.
Right to notification
Insofar as you have asserted your right to rectification, erasure, or the restriction of processing, we are obligated to notify all recipients of the personal data of this rectification, erasure of the data, or the restriction of processing. According to sentence 2 of Art. 19 GDPR, you have the right to be notified of these recipients by us on request.
Right to data portability
According to Art. 20 GDPR, you have the right to receive the personal data concerning you, which you provided to us, in a structured, commonly used and machine-readable format or to request their transmission to another controller.
Right to object to direct marketing
Insofar as personal data concerning you are processed on the basis of legitimate interests according to sentence 1, point (f) of Art. 6(1) GDPR, you have the right according to Art. 21 GDPR to object to the processing of personal data concerning you on grounds relating to your particular situation, or to object to processing for direct marketing purposes. In the latter case, you have a general right to object that is implemented by us without reference to a particular situation.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right according to Art. 77 GDPR to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you is unlawful.
As a rule, you can exercise this right by contacting the supervisory authority responsible for your habitual residence or place of work, or our place of business. The data protection supervisory authority responsible for our registered office is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
https://www.lda.bayern.de
Supplementary data protection notice for our customers, suppliers, and other business partners (m/f/d)
Scope of processing personal data
In principle, we process your personal data and the personal data of your company’s contact persons only to the extent required for the provision of our services. As a rule, your personal data are processed only based on the fulfillment of a contract or to take steps prior to entering into a contract.
b. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, point (a) of Art. 6(1) GDPR forms the legal basis.
For the processing of personal data required for the fulfillment of a contract between you and us, the legal basis is point (b) of Art. 6(1) GDPR. This applies correspondingly to data processing required for pre-contractual measures.
Insofar as the processing of personal data is required to meet a legal obligation imposed on us, the legal basis is point (c) of Art. 6(1) GDPR.
When processing is necessary to protect a legitimate interest of us or a third party, and your interests, basic rights, and fundamental freedoms or those of your company’s contact persons do not outweigh the former interest, the legal basis for processing is point (f) of Art. 6(1) GDPR.
Data erasure and storage duration
Your personal data and that of your company’s contact persons are erased, or their processing is restricted, as soon as the purpose of storage no longer applies. Extended storage may occur where stipulated by European or national lawmakers in EU regulations and laws, or other regulations applicable to us. Erasure or the restriction of processing also takes place when a retention period specified by the aforementioned norms ends, unless there is a need for the continued storage of the data for the conclusion or performance of a contract.
Embedded YouTube videos
Type and purpose of processing:
We embed YouTube videos on some of our website pages. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection is established to YouTube’s servers. YouTube is thereby informed of the pages you visit. If you are logged on to your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by first logging out of your YouTube account.
When a YouTube video is started, the provider uses cookies that collect information about user behavior.
See the provider’s data protection notice for further information about the purpose and scope of data collection and processing by YouTube. There you will also find further information about your related rights and setting options to protect your privacy: https://policies.google.com/privacy.
Legal basis:
The legal basis for the integration of YouTube and associated data transfer to Google is your consent (point (a) of Art. 6(1) GDPR).
Recipients:
Calling up YouTube automatically establishes a connection to Google.
Storage duration and revocation of consent:
If you have deactivated the storage of cookies for the Google ad program, you need not be concerned about such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you have to block the storage of cookies in your browser.
Further information on data protection by YouTube is found in the provider’s data protection notice at https://www.google.de/intl/de/policies/privacy/
Prescribed or mandatory provision:
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in a limitation of functionality on the website.