Krone krone Logo Krone Logo

Data protection

ART. 13 of the German Data Protection Act (GDPR)

Thank you for visiting our website. We would like to inform you in the subsequent paragraphs about how we handle your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).

Person responsible
The entity named in the imprint is responsible for the data collection and processing described below. 

User data
When you visit our websites, user data is temporarily stored on our web server as a protocol for statistical purposes in order to improve the quality of our websites. This data set consists of

  • the page from which the file was requested,
  • the name of the file,
  • date and time of the request,
  • the amount of data transferred,
  • the access status (file transferred, file not found),
  • the description of the type of web browser used,
  • the IP address of the requesting computer, which is abbreviated so that no personal references can be made. 

The above log data is only stored anonymously.

Data transfer to third parties
We transfer your data to service providers who support us in operating our websites and the associated processes within the scope of order processing in accordance with Art. 28 of the GDPR. All our service providers are strictly bound by instructions and contractually obligated to us appropriately. These may include, for example, service providers for hosting or web analytics.

Data transfer to third countries
We sometimes transfer personal data to a third country outside the EU. We have ensured an adequate level of data protection in each case:

In the case of Google Inc. and Meta Platforms Inc. (USA), we have concluded the EU standard contractual clauses and implemented additional technical and organisational measures for data security.

Cookies

Google Analytics
We use the web analysis tool "Google Analytics" to design our websites in line with requirements. Google Analytics creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read by us. In this way, we are able to recognise returning visitors and count them as such. Within the scope of Google Analytics, we are supported by Google Ireland Limited and Google LLC. (USA) as processors according to Art. 28 GDPR. Data processing may therefore also take place outside the EU or EEA. With regard to Google LLC, an adequate level of data protection cannot be assumed due to processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having legal recourse. Please bear this in mind if you decide to give your consent to our use of Google Analytics. Data processing is based on your consent in accordance with Art. 6 (1) lit. a GDPR, provided you have given your consent via our banner. The transfer to a third country takes place on the basis of Art. 49 (1) lit. a GDPR. You can revoke your consent at any time. The banner can be called up again at any time by clicking on "Cookie settings" in the footer at the bottom right.

Data privacy
In order to protect your data from unauthorised access as thoroughly as possible, we take technical and organisational measures. We use an encryption procedure on our pages. Your details are transferred from your computer to our server and vice versa over the internet using TLS encryption. You can recognise this when the lock symbol is closed in the status bar of your browser and the address line begins with https://.

Facebook Remarketing
This website uses the retargeting function "Custom Audiences" of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. The data processing is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO, provided that you have given your consent via our banner. The banner can be called up again by clicking on "Cookie settings" in the footer at the bottom right. You can revoke your consent there at any time. If you have given your consent, a direct connection is established between your browser and the Facebook server via the retargeting tags. Facebook thereby receives the information that you have visited our site with your IP address. This enables Facebook to assign the visit to our pages to your user account. We can use the information obtained in this way to display Facebook Ads. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. You can find more information on this in Facebook's privacy policy at https://www.facebook.com/about/privacy/.

Embedded YouTube videos
On our websites, we embed videos via the third-party provider YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, which are not stored on our servers. To ensure that accessing our web pages with embedded videos does not automatically lead to content from the third-party provider being reloaded, we only display locally stored preview images of the videos in a first step. This does not provide the third-party provider with any information. Only after a click on the preview image is the content of the third-party provider loaded. This provides the third-party provider with the information that you have accessed our site as well as the usage data technically required in this context. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us your consent to reload content from the third-party provider. The embedding is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO, provided that you have given your consent by clicking on the preview image. You can find further information on "YouTube" data protection in the provider's data protection declaration at: https://policies.google.com/privacy.

Google Maps
On our website, we embed the interactive map service Google Maps from the third-party provider Google Ireland Ltd. in the access-protected area. Google Maps is not stored on our servers. In order to ensure that accessing our website with the embedded map service does not automatically lead to the content of the third-party provider being reloaded, we only display locally stored preview images of the maps in a first step. This does not provide the third-party provider with any information. Only after a click on the preview image is the content of the third-party provider loaded. This provides the third party with the information that you have accessed our site as well as the technically necessary usage data. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us permission to load content from the third-party provider. The embedding is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, provided you have given this by clicking on the preview image. Please note that the embedding of some map services leads to your data being processed outside the EU or EEA by Google LLC. In some countries (especially the US), there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to seek redress. In this respect, the transfer to an unsafe third country takes place on the basis of your consent pursuant to Art. 49 (1) lit. a GDPR.

Newsletter
You can order a newsletter on our websites. Please note that we require certain data (at least your surname and e-mail address for general communication as well as the country of business residence for the allocation of suitable topics/products) for the newsletter registration. The newsletter will only be sent if you have given us express consent in accordance with Art. 6 Para. 1 lit. a GDPR via the tick box at the bottom left. Once you have placed your order, you will receive a confirmation e-mail at the e-mail address you provided (so-called double opt-in). You can revoke your consent at any time. You can easily revoke your consent, for example, by clicking on the unsubscribe link in every newsletter. The newsletter form is provided and sent by HubSpot, Inc. (25 First Street, Cambridge, MA 02141 USA). HubSpot acts as a processor for us in this respect. A corresponding contract for order processing and the EU standard contractual clauses have been concluded with HubSpot. For data transfers to the USA that cannot be ruled out, an appropriate level of data protection is also guaranteed due to HubSpot's accession to the EU-U.S. Data Privacy Framework. Further information on data protection at HubSpot can be found at legal.hubspot.com/privacy-policy.

Contact form
You can contact us using a web form. In order to use our contact form, we need your name, address and e-mail address. You can include further details, but you are not obliged to do so. The legal basis of the processing is Article 6, paragraph 1, sentence 1, lit. f of the GDPR. We will only use your data to process your request.

Your rights as a user
When processing your personal data, the GDPR affords you, as a website user, certain rights:

1 Right of access (Article 15 of the GDPR): 

You have the right to request confirmation regarding whether or not personal data concerning you are being processed. If this is the case, you have the right to be informed about such personal data and receive the information listed in detail in Article 15 of the GDPR.

2 Right to rectification and erasure (Article 16 and 17 of the GDPR): 

You have the right to immediately request the rectification of any inaccurate personal data concerning you as well as the completion of any incomplete personal data, as applicable.

You also have the right to request that personal data relating to you be immediately deleted if one of the reasons listed in detail in Article 17 of the GDPR applies, e.g. if the data is no longer required for the purposes pursued.

3 Right to restrict processing (Article 18 of the GDPR): 

You have the right to request the restriction of processing if one of the conditions listed in Article 18 of the GDPR applies, e.g. if you have objected to the processing, for the duration of any review. 

4 Right to data portability (Article 20 of the GDPR):

In certain cases, which are detailed in Article 20 of the GDPR, you have the right to receive the personal data concerning you in a structured, standard and machine-readable format or to request the transfer of this data to a third party.

5 Right to object (Article 21 of the GDPR):

If data is collected based on Article 6, paragraph 1, sentence 1, lit. f (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or if the processing serves the purpose of asserting, exercising or defending legal claims.

6 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR if you are of the opinion that the processing of data concerning you violates data protection regulations. The right to lodge a complaint may in particular be exercised before a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged infringement.

Contact details of the data protection officer
Our company data protection officer will be happy to provide you with information or suggestions on the subject of data protection:

Dr. Uwe Schläger
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen, Germany
Web: www.datenschutz-nord-gruppe.de
E-mail: office@datenschutz-nord.de
Telephone: +49 (0)421 69 66 32 0

Privacy Policy on Social Media