Privacy policy

Status March 2025

1 Name and address of the controller

2 Contact details of the data protection officer

3 General information on data processing

4 Rights of the data subject

5 Provision of the website and creation of log files

6 Use of cookies

7 Newsletter

8 E-mail contact

9 Contact form

10 Use of company presences in social and professional networks

11 Hosting

12 Content delivery networks

13 Plugins and tools used

1 Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

Masterflex SE
Willy-Brandt-Allee 300
45891 Gelsenkirchen
Germany
+49 209 97077 0
datenschutz.masterflex@masterflexgroup.com
www.masterflex.de

2 Contact details of the data protection officer

The data protection officer of the controller is

heyData GmbH
Schützenstr. 5
10117 Berlin
Germany
datenschutz@heydata.eu

3 General information on data processing

3.1 Scope of the processing of personal data

We only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is required by law.

3.2 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis.
Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis for the processing of personal data that is necessary for the fulfilment of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for the processing.

3.3 Data erasure and storage duration

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

4 Rights of the data subject

If we process your personal data, you have the following rights as a data subject:

• a right to information about the processed data and to a copy,
• a right to rectification if we process incorrect data about you,
• a right to erasure, unless exceptions apply as to why we still store the data, e.g. retention obligations or limitation periods,
• a right to restriction of processing,
• a right to withdraw consent to data processing at any time,
• a right to object to processing in the public interest or in the legitimate interest,
• a right to data portability,
• a right to lodge a complaint with a data protection supervisory authority if you believe that we are not processing your data properly. The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia is responsible for our company. However, if you are in another federal state or not in Germany, you can also contact the data protection authority there.

5 Provision of the website and creation of log files

5.1 Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

• Information about the browser type and version used
• the user's operating system
• the user's internet service provider
• the IP address of the user
• Date and time of access
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website

This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

5.2 Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

5.3 Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 5.2.

5.4 Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client.

5.5 Possibility of objection

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined as part of a weighing of interests.

6 Use of cookies

6.1 Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies

• Log-in information
• Cookie settings
• Search terms
• Other information required to provide the website

The user data collected in this way is pseudonymised using technical precautions. The data is not stored together with other personal user data.

We also use cookies on our website that enable us to analyse the surfing behaviour of users. The following data is stored and transmitted in the analysis cookies

• User behaviour on our website
• Other information used for marketing purposes

You can find more information on our use of analytics cookies in our privacy policy under section 13.

6.2 Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.

6.3 Legal basis for data processing

The legal basis for the storage of analysis cookies in the user's terminal equipment is the user's consent in accordance with Section 25 (1) TDDDG. The legal basis for the processing of personal data using analytics cookies is Art. 6 para. 1 sentence 1 lit. a GDPR. The legal basis for the storage of strictly necessary cookies in the user's terminal equipment is Section 25(2)(2) TDDDG. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.

6.4 Revocation and objection options

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent. If you are using a Safari browser version 12.1 or higher, cookies are automatically deleted after seven days. This also applies to opt-out cookies, which are set to prevent tracking measures.

You can also prevent the collection and processing of your personal data by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript(https://noscript.net/) or Ghostery(https://www.ghostery.com) in your browser.

You also have the option of selecting and deactivating the various tags/trackers/analysis tools on this website in the data protection settings. To do this, click on the fingerprint symbol at the bottom left of the screen.

7 Newsletter

7.1 Description and scope of data processing

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us.

• e-mail address
• Surname
• First name
• IP address of the accessing computer
• Date and time of registration

No data will be passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.

7.2 Purpose of data processing

The purpose of collecting the user's email address is to send the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.

7.3 Legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given consent.

7.4 Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user's email address is therefore stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process is generally deleted after a period of seven days.

7.5 Objection and cancellation options

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter. This also makes it possible to revoke consent to the storage of personal data collected during the registration process.

8 E-mail contact

8.1 Description and scope of data processing

It is possible to contact us via the email address provided on our website. In this case, the user's personal data transmitted with the e-mail will be stored. The data is used exclusively for processing the conversation.

8.2 Purpose of data processing

If contact is made by email, this also constitutes the necessary legitimate interest in processing the data.

8.3 Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

8.4 Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

8.5 Objection and cancellation options

If the user contacts us by email at datenschutz.masterflex@masterflexgroup.com, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

9 Contact form

9.1 Description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. The following data is stored when the message is sent:

• Business e-mail address
• Surname
• First name
• Company name
• Company address
• Telephone number
• IP address of the calling computer
• Date and time of contact

9.2 Purpose of data processing

The processing of the personal data from the input mask serves us solely to process the contact or to initiate a contractual relationship. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

9.3 Legal basis for data processing

The legal basis for the processing of data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 sentence 1 lit. b GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 sentence 1 lit. f GDPR.

9.4 Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected and statutory retention periods no longer require the data to be retained.

9.5 Possibility of objection

If the user contacts us by email at datenschutz.masterflex@masterflexgroup.com, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

10 Use of company presences in social and professional networks

We use the option of company presences on social and career-oriented networks for communication and the exchange of information with (potential) customers, interested parties and applicants. The publications about the company's presence may contain the following content:

• Information about products
• Information about services
• competitions
• advertising
• Customer contact
• Information/PR
• Job applications
• Active sourcing

We maintain a company presence on the following social / job-orientated networks:

• Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
• Instagram: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
• YouTube: Google Ireland Limited-Dublin, Ireland
• X: Twitter International Unlimited Company, Ireland
• LinkedIn: LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland
• XING: XING SE, Dammtorstraße 30, 20354 Hamburg, Germany

The legal basis for the processing of the data that we collect in connection with the use of our company websites is Art. 6 para. 1 lit. f GDPR. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. You can object to the processing of your personal data that we collect when you use our company websites at any time and assert your rights as a data subject as set out in section 4 of this privacy policy. To do so, send us an informal email to datenschutz.masterflex@masterflexgroup.com.

If you carry out an action on one of our company websites (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by the companies jointly responsible for the corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data. Further information on objection and removal options vis-à-vis the providers of the social networks can be found here:

• Facebook: https://de-de.facebook.com/privacy/policy
• Instragram: https://privacycenter.instagram.com/policy
• YouTube: https://policies.google.com/privacy
• X: https://x.com/de/privacy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• XING: https://privacy.xing.com/de/datenschutzerklaerung

11 Hosting

The website is hosted on servers of a service provider commissioned by us. Our service provider is: ALL-INKL.COM - Neue Medien Münnich, Hauptstr. 68, 02742 Friedersdorf, Germany. The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Date and time of the server request
• IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimise its functions. The location of the website server is geographically located in the European Union (EU) or the European Economic Area (EEA).

12 Content delivery networks

We integrate certain plugins on our website via external service providers in the form of content delivery networks. When you visit our website, a connection is established to the servers of the providers we use in order to retrieve content and store it in the cache of the user's browser. As a result, personal data may be stored and analysed in server log files, in particular device and browser information (especially the IP address and operating system). We use the content delivery network KeyCDN from the provider proinity LLC, Faerberstrasse 9, CH-8832 Wollerau, Switzerland

12.1 Purpose of data processing

The use of the functions of these services serves to deliver and accelerate online applications and content.

12.2 Legal basis for data processing

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website.

12.3 Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.

12.4 Possibility of objection

Information on exercising your rights against KeyCDN can be found at: https://www.keycdn.com/privacy

13 Plugins and tools used

By using our plugins, some of your personal data is sent to the USA or other third countries outside the EU. In order to ensure suitable guarantees for the protection of the transfer and processing of personal data outside the EU, data is transferred to and processed by our plugin operators on the basis of suitable guarantees in accordance with Art. 46 et seq. GDPR, in particular through the conclusion of so-called standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR.
We use plugins for various purposes. The plugins used are listed below:

13.1 Use of LUX

13.1.1 Scope of the processing of personal data

We use the self-hosted marketing optimisation tool lux from in2code GmbH to identify website visitors, generate leads and develop leads (nurturing). The following data can be collected with the use of lux:

Analysis data:

• Visit data: pages visited, content downloaded, search terms used, links clicked (shortener & linklistener), selected variant (A/B testing)
• Local storage: Tracking consent (yes/no), email4link already used (yes/no)

Personal data:

• IP address in anonymised form
• Form data (surname, first name, business email address)

Further information on the processing of data by in2code GmbH can be found here: https://www.in2code.de/

13.1.2 Purpose of data processing

After your first visit to the website, Lux attempts to recognise your repeat visits based on your behaviour and the hardware you use in order to be able to offer you content according to your preferences and to simplify the usability of the website. For this purpose, "LUX" creates a so-called hash value from some of the properties of your end device transmitted by the browser (including the browser type, the language setting, the colour depth, some parameters of the hardware used), which can be used to recognise you when you visit the website in the future.

13.1.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

13.1.4 Duration of storage

The data will be deleted as soon as it is no longer used for processing purposes, but no later than 3 years after the last visit.

13.1.5 Possibility of cancellation

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

13.2 Use of Inxmail

13.2.1 Scope of the processing of personal data

We use functionalities of the newsletter tool Inxmail Professional from Inxmail GmbH, Wentzigerstraße 17, 79106, Freiburg, Germany (hereinafter referred to as: Inxmail). Inxmail Professional is a software for personalised newsletters and automated email campaigns. Interactions with the newsletters can be measured using so-called web beacons or tracking pixels. Cookies from Inxmail are stored on your end device. Inxmail processes the following personal data in particular

• Surname
• first name
• email address
• Meta and communication data
• Device information
• IP address
• Usage data
• interests
• Access times

Further information on the processing of data by Inxmail can be found here: https://www.inxmail.de/datenschutz

13.2.2 Purpose of data processing

We use Inxmail Professional to register interested parties for newsletters and to analyse and evaluate newsletter campaigns.

13.2.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

13.2.4 Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
This data can also be deleted at Inxmail's request. The storage of cookies is not the responsibility of Inxmail.

13.2.5 Cancellation option

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Further information on objection and removal options vis-à-vis Inxmail can be found at: https://www.inxmail.de/datenschutz

13.3 Use of LinkedIn Insight Tag

13.3.1 Scope of the processing of personal data

We use functionalities of the LinkedIn Insight Tag marketing plugin from LinkedIn Corporation, 1000 W. Maude Ave, 94085, Sunnyvale, California, United States (hereinafter referred to as: LinkedIn). The LinkedIn Insight tag helps us to measure interactions on our website, such as filling out a form or downloading content after an advert has been viewed or clicked on. The Insight tag works by creating a cookie in visitors' web browsers when our website is visited. These "deadline party" cookies help us determine which members are shown our adverts to improve campaign results and enable detailed campaign reporting.

A first-party cookie is a small piece of code that a web browser stores in a file on the viewer's computer to remember their activity on a website, such as when a viewer has visited a page or downloaded an article from a website. A first-party cookie comes from the domain (or website) that the member is browsing.

Consent to use this feature is collected via our cookie banner. Further information on the cookies used can be found here: https://www.linkedin.com/legal/cookie-policy
In particular, the following personal data is processed by LinkedIn:

• URL
• Referrer URL
• IP address shortened or hashed
• Device and browser properties (user agent) and timestamp

LinkedIn does not share any personal data with us, but only provides aggregated reports on the target group and adverts. LinkedIn also offers a remarketing function that allows us to show you targeted, personalised advertising outside our website without us knowing your identity. Data may be transmitted to LinkedIn servers in the USA.

Further information on the processing of data by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

13.3.2 Purpose of the data processing

We use the LinkedIn Insight Tag to collect information about visitors to our website.

13.3.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

13.3.4 Duration of storage

The members' direct identifiers are removed within seven days in order to pseudonymise the data. This remaining pseudonymised data is then deleted within 180 days.

13.3.5 Cancellation option

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Further information on objection and removal options vis-à-vis LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

13.4 Use of Google Ads conversion tracking

13.4.1 Scope of the processing of personal data

We use the Google Ads Conversion Tracking programme from Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland.

Google Ads Conversion Tracking records what happens after a click on an advert placed by us via Google Ads when users subsequently visit our website. It is recorded whether users carry out a certain action on the website specified by us (e.g. whether goods are ordered). This allows us to track which keywords, adverts, ad groups or campaigns lead to the desired user interaction. The conversion tracking cookie is set when a user clicks on an Ads advert placed by Google.

Personal data relating to the user's activity, device and browser information and data about the advertisements displayed (in particular the date and time of the website visit, browser language, browser type, user behaviour, IP address, cookie ID, referrer URL, web request, which advertisements were displayed and whether the user clicked on them) can be stored and evaluated as a result.

Further information on processing can be found here: https://policies.google.com/privacy?gl=de and https://policies.google.com/technologies/cookies

13.4.2 Purpose of the data processing

The purpose of the processing of personal data is conversion tracking (visit action evaluation), a targeted approach to a target group that has already expressed an initial interest by visiting the site.

13.4.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

13.4.4 Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes. Cookies are stored for a maximum period of one year.

13.4.5 Right of cancellation

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

In addition, you can permanently prevent Google Ads Conversion Tracking from setting cookies by downloading and installing the Google browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de or by using the setting and opt-out options provided by Google: https://safety.google/privacy/privacy-controls/.

Further information on objection and removal options can be found at: https://policies.google.com/privacy?gl=DE&hl=de..

13.5 Use of Google Ads Remarketing

13.5.1 Scope of the processing of personal data

We use Google Ads Remarketing from Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. Google Remarketing is used to retarget visitors to the online presence for advertising purposes via Google Ads adverts. Google Ads Remarketing can be used to create target groups ("similar target groups") that have, for example, accessed certain pages. This makes it possible to identify the user on other online presences and display targeted advertising. Google places a cookie on the user's computer.

Personal data relating to the user's activity, device and browser information and data about the adverts displayed (in particular website visits, location, duration and time of the website visit, IP address, user interests, referrer URL, advertising ID) can be stored and analysed as a result.

Further information on processing can be found here: https://policies.google.com/privacy?gl=de and https://policies.google.com/technologies/cookies

13.5.2 Purpose of the data processing

The purpose of processing personal data is to specifically address a target group. The cookies stored on the user's end device recognise them when they visit an online presence and can therefore show them interest-based advertising.

13.5.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

13.5.4 Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes. Cookies are stored for a maximum period of one year.

13.5.5 Right of cancellation

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

In addition, you can permanently prevent the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in from Google available at the following link: https://www.google.com/settings/ads/plugin?hl=de or by using the setting and opt-out options provided by Google: https://safety.google/privacy/privacy-controls/.

Further information on objection and removal options can be found at: https://policies.google.com/privacy?gl=DE&hl=de.

13.6 Use of Piwik PRO

13.6.1 Scope of the processing of personal data

We use the web analysis software Piwik PRO Analytics Suite from Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin, Germany for the purpose of analysing our reach. We collect anonymous data about website visits without cookies but using a session fingerprint method. The information collected includes, for example, the anonymised IP address of the visitor, the operating system, title or URL of the page visited and other information. Take a look at the scope of the data collected by Piwik PRO.

13.6.2 Purpose of the data processing

We use Piwik PRO Analytics Suite to analyse and regularly improve the use of our website. We can use the statistics obtained to rectify navigation problems, make the website clearer, make information more easily accessible, generally improve our offering and make it more interesting for you as a user.

13.6.3 Legal basis for the processing of personal data

The data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website.

13.6.4 Duration of storage

We host our solution on Microsoft Azure in Germany and store the data for a maximum of 25 months.

13.6.5 Possibility of cancellation

Piwik PRO does not transfer the data about you to other sub-processors or third parties and does not use it for its own purposes. For more information on objection and removal options vis-à-vis Piwik PRO Analytics Suite, please refer to Piwik PRO's privacy policy.

13.7 Use of YouTube

13.7.1 Scope of the processing of personal data

We use the YouTube plugin operated by Google, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA and its representative in the Union Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google). We use the YouTube plugin to embed videos from YouTube on our online presence. When you visit our online presence, your browser establishes a connection with the YouTube servers. This allows personal data to be stored and analysed, in particular the user's activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system). We have no influence on the content of the plug-in. If you are logged into your YouTube account during your visit, YouTube can assign your online presence visit to this account. By interacting with this plug-in, this corresponding information is transmitted directly to YouTube and stored there.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

13.7.2 Purpose of the data processing

The use of the YouTube plug-in serves to improve user-friendliness and an appealing presentation of our online presence.

13.7.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

13.7.4 Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

13.7.5 Right of cancellation

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

13.8 Use of CCM19

13.8.1 Scope of the processing of personal data

We use the consent management tool CCM19 from Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany on our website.

The tool enables you to give your consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent you have already given.

13.8.2 Purpose of data processing

The purpose of data processing is to obtain and document the necessary consent for data processing and thus to comply with legal obligations. The following information is collected for this purpose

• Date and time of the page view
• a random ID
• Consent status

Data is not passed on to Papoo Software & Media GmbH.

13.8.3 Legal basis for data processing

Data processing is carried out to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR.

13.9 Use of Friendly Captcha

13.9.1 Scope of the processing of personal data

Our website uses the "Friendly Captcha" service (Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany, www.friendlycaptcha.com). Friendly Captcha is a data protection-friendly protection solution to make it more difficult for automated programmes and scripts (so-called "bots") to use our website. For this purpose, we have integrated a programme code from Friendly Captcha into our website (e.g. for contact forms) so that the visitor's end device can establish a connection to the Friendly Captcha servers in order to receive a calculation task from Friendly Captcha. The visitor's end device solves the calculation task (puzzle), which requires certain system resources, and sends the calculation result to our web server. This contacts the Friendly Captcha server via an interface and receives a response as to whether the puzzle has been solved correctly by the end device. Depending on the result, we can add security rules to requests via our website and, for example, process or reject them.

Friendly Captcha processes and stores the following data in the above-mentioned process

• Anonymised IP address of the requesting computer
• Information about the browser and operating system used
• Anonymised counter per IP address to control the cryptographic tasks
• Website from which the access took place.

13.9.2 Purpose of data processing

The data is used exclusively to protect against spam and bots as described above. Friendly Captcha does not set or read any cookies on the visitor's end device. IP addresses are only stored in hashed (one-way encrypted) form and do not allow us or Friendly Captcha to draw any conclusions about an individual person. Legal basis for the processing of personal data

13.9.3 Legal basis for the processing of personal data

The legal basis for the processing is our legitimate interest in protecting our website from abusive access by bots, i.e. spam protection and protection against attacks (e.g. mass requests), Art. 6 para. 1 lit. f GDPR.

13.9.4 Duration of storage

If personal data is collected, it will be deleted after 30 days at the latest.

Further information on data protection when using Friendly Captcha can be found at https://friendlycaptcha.com/legal/privacy-end-users/