Privacy Statement

A. Moras & Comp. GmbH & Co. KG

The following privacy notice informs you about the processing of personal data carried out by A. Moras & Comp. GmbH & Co. KG, Europaallee 42, 50226 Frechen (hereinafter ‘A. Moras & Comp. GmbH & Co. KG’ or ‘we’), in accordance with the General Data Protection Regulation (hereinafter ‘GDPR’) and the German Federal Data Protection Act (hereinafter ‘BDSG’).

General

As a visitor to our website, you expect not only high-quality services but also a high standard in the processing of your personal data. We therefore process personal data strictly in line with the requirements of the GDPR as well as applicable national data protection laws, in particular the Telecommunications Digital Services Data Protection Act (TDDDG). We process your data only where a legal basis permits this or where you have given us your explicit consent. Personal data includes any information by which you can be identified or are identifiable.

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions as well as this privacy statement. Please note, however, that data transmission over the internet (e.g. communication by email) may involve security vulnerabilities. Complete protection of data against access by third parties is not possible.

Under the GDPR, personal data means any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more specific personal characteristics (‘personal data’). Data that can be attributed solely to a legal entity does not constitute personal data and is therefore neither subject to this privacy statement nor to the provisions of the GDPR.

In the following, you will find information about the controller responsible for processing your personal data and the controller’s data protection officer (Section I), as well as about your rights in relation to the processing of your personal data (Section IV). We also inform you about the processing of your personal data (Section III) and the use of the services provided on the website. Details on how we process the data of business partners and applicants can be found in Section II.

SECTION I: OBLIGATIONS TO INFORM

I. Website visitors

Privacy information for the use of our website can be found below.

II. Business partners

Supplementary information on how we process the data of business partners can be found here: Privacy information for business partners 

III. Applicants

Supplementary information on how applicant data is processed can be found here: Privacy information for applicants

IV. Social media services

The supplementary privacy statement for our social media profiles can be found here: Privacy information on social media presences

 

SECTION II: CONTROLLER AND DATA PROTECTION OFFICER 

Who is responsible for data collection on this website?

Data processing on this website is carried out by A. Moras & Comp. GmbH & Co. KG. You can find the full contact details in the legal notice (Impressum) on this website.

Contact details of the Data Protection Officer

You can reach the Data Protection Officer of A. Moras & Comp. GmbH & Co. KG by email at: Datenschutz@schaebens.de.

 

SECTION III: DATA PROCESSING ON THIS WEBSITE

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us, for example by entering information into a contact form. Other data is collected by our IT systems, either automatically or after you have given consent, when you visit the website. This mainly concerns technical data (e.g. browser type, operating system, or time of page access). The collection of this data takes place automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyse user behaviour, optimise our services, or for marketing purposes.

Analysis tools and tools from third-party providers

When you visit this website, your browsing behaviour may be statistically evaluated. This is primarily done using so-called analytics programmes. Detailed information on these analytics programmes can be found in the following privacy statement.

External hosting

This website is hosted by an external service provider (‘host’). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access data, and other data generated via a website. We use the host for the purpose of performing contracts with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of ensuring the secure, fast, and efficient provision of our online services by a professional provider (Art. 6 (1) (f) GDPR). Our host will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data. We use the following host: Host Europe GmbH, Hansestr. 111, 51149 Cologne.

Retention period

Where processing is necessary for the establishment, exercise, or defence of legal claims, data may be retained for up to three years. This period is based on the standard statutory limitation period and serves in particular to document consent given or withdrawn. Data processed in connection with the administration of prize draws is retained for ten years due to retention obligations under tax and commercial law. Log data collected to ensure operations and guarantee IT security is generally deleted after no more than seven days. Tracking and analytics data, where you have given consent, is stored for between a few days and a maximum of two years, depending on the tool used. In all other cases, we delete personal data as soon as the respective processing purpose ceases and no statutory retention period prevents deletion.

Data transfers to third countries including the USA

In the case of some of the services we use, data may be transferred to third countries outside the EU or EEA, in particular to the USA. For providers certified under the EU–US Data Privacy Framework, an adequate level of data protection applies (Art. 45 GDPR). In the case of providers without certification, we base the transfer of data on the EU Commission’s Standard Contractual Clauses (SCCs) (Art. 46 GDPR). In rare cases, data transfer may also be based on your explicit consent in accordance with Art. 49 (1) (a) GDPR.

Cookies

Our websites use so-called ‘cookies’. Cookies are small text files that do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (‘session cookies’) or permanently (‘persistent cookies’). Session cookies are automatically deleted once you end your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser performs automatic deletion. In some cases, cookies from third‑party companies (‘third‑party cookies’) may also be stored on your device when you access our website. These enable us or you to use certain services provided by the third party. Cookies serve different functions. Many cookies are technically necessary, as certain website functions would not work without them. Other cookies are used to analyse user behaviour or to show advertising. Cookies required for carrying out electronic communication (necessary cookies), for providing specific functions you request (functional cookies), or for optimising the website (e.g. cookies for measuring website audience) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified. A. Moras & Comp. GmbH & Co. KG has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Where consent to the storage of cookies has been requested, the relevant cookies are stored exclusively on the basis of this consent (Art. 6 (1) (a) GDPR); consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate automatic deletion of cookies when closing the browser. Disabling cookies may restrict the functionality of this website. Where cookies from third-party providers or for analytics purposes are used, we shall inform you separately in this privacy statement and, where applicable, request your consent.

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:

  • browser type and version
  • operating system used
  • referrer URL
  • hostname of the accessing computer
  • time of the server request
  • IP address

This data is not combined with other data sources. The collection of this data is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in the technically error-free presentation and optimisation of our website – for this purpose, server log files must be collected. As a rule, this data is deleted after 7 days.

Contact form

If you send us enquiries via the contact form, the information you provide in the application form, including the contact details you enter there, is stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass on this data without your consent. The processing of this data is based on Art. 6 (1) (b) GDPR, insofar as your enquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), where this has been requested. The data you enter in the contact form remains with us until you request deletion, withdraw your consent to storage, or the purpose for data storage ceases to apply (e.g. once your enquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Where cookies or similar technologies are used to protect against misuse when submitting the contact form (e.g. Google reCAPTCHA), the storage of or access to this information is based on your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. Consent may be withdrawn at any time.

Friendly Captcha

We use on our website the external security service ‘Friendly Captcha’, provided by Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee. The service provides a modern, privacy-friendly solution designed to make the use of our website more difficult for automated programs and scripts (‘bots’), and to reliably prevent abusive access, such as spam or mass requests. Its use is strictly for the purpose of defending against automated spam and bot requests and for securing our contact and service forms against misuse. At the same time, the processing helps ensure a functional, secure and disruption-free customer service and customer contact process. The legal basis for the processing is Art. 6 (1) (f) GDPR. Our legitimate interest lies in protecting our systems against automated attacks and in ensuring the secure and efficient handling of legitimate user enquiries. A data processing agreement pursuant to Art. 28 GDPR exists with Friendly Captcha. For the technical implementation of the protection mechanism, a programme code from Friendly Captcha is integrated into our website. The user’s device or browser establishes an encrypted connection to the servers of Friendly Captcha without any active user input and retrieves a cryptographic computing puzzle as part of an automated proof-of-work procedure. This puzzle is solved locally in the browser; system resources are used only temporarily for this purpose. The result of the solution is then transmitted to our web server and validated by Friendly Captcha via a secure API interface. The verification result technically classifies the request as human or potentially automated, without any personal identification or profiling taking place. Only the information required for the technical verification is processed as part of the security check.

This includes, in particular:

  • a one-way hashed, non-reversible IP address
  • technical browser or device information (e.g. user agent)
  • the time of access
  • a cryptographic proof of the puzzle solution (solution/proof hash)

This data is used solely for detecting and preventing automated access. The data is not used for analytics, tracking, or advertising purposes. Direct identification of natural persons is, according to the state of the art, not possible for us or for Friendly Captcha. Friendly Captcha does not set cookies and does not use techniques such as device fingerprinting or other recognition technologies. No personal tracking of user behaviour takes place. No data processed in connection with Friendly Captcha is passed on to third parties. The entire technical infrastructure is operated exclusively within the European Union; no data is transferred to third countries. Any data that could have a (pseudonymous) personal reference and is processed or temporarily stored in the course of the security check is deleted no later than within 30 days. Results of the security procedure that are required for system operation are stored only in anonymised and aggregated form.

If, in individual cases, a personal reference is legally assumed despite extensive technical pseudonymisation, you are entitled to the rights under Art. 15, 17 and 21 GDPR. As Friendly Captcha uses only hashed verification proofs and it is technically impossible to assign them to specific individuals, these rights relate exclusively to data that is processed in an identifiable manner directly by the website operator (e.g. the contents of a contact form). You may submit requests regarding your data subject rights at any time to the contact addresses provided in the legal notice or in this privacy statement. Further information on data processing by Friendly Captcha GmbH can be found at: https://friendlycaptcha.com/legal/privacy-end-users/

Enquiries by email, telephone, or fax

When you contact us by email, telephone, or fax, your enquiry, including all personal data arising from it (name, enquiry), is stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. The processing of this data is based on Art. 6 (1) (b) GDPR, insofar as your enquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), where this has been requested. The data you send us in contact enquiries remains with us until you request deletion, withdraw your consent to storage, or the purpose for data storage ceases to apply (e.g. once your request has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected

 

SECTION IV: YOUR RIGHTS

Under the GDPR, you as the data subject have the following rights:

Art. 15 GDPR – right of access: You have the right to obtain confirmation as to whether we process personal data concerning you, and, if so, which data. This includes, in particular, information about the purposes of processing, categories of personal data, recipients or categories of recipients to whom the data have been disclosed or will be disclosed, the planned retention period, and the origin of your data if the data were not collected directly from you.

Art. 16 GDPR: right to rectification: You have the right to obtain without undue delay rectification of inaccurate personal data concerning you, or the completion of incomplete personal data.

Art. 17 GDPR: right to erasure: You have the right to obtain the erasure of your personal data, provided that no statutory retention obligations prevent this or the processing is not required for the establishment, exercise, or defence of legal claims.

Art. 18 GDPR: You have the right to obtain restriction of processing of your personal data where:

  • you contest the accuracy of the data,
  • the processing is unlawful but you oppose erasure,
  • we no longer need the data but you require it for the establishment, exercise, or defence of legal claims, or
  • you have objected to processing.

Art. 20 GDPR: You have the right to receive in a structured, commonly used, and machine-readable format the personal data you have provided to us, and to obtain transmission to another controller where technically feasible.

Art. 21 GDPR: You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data where this is based on Art. 6 (1) (e) or (f) GDPR. In the event of an objection, we shall no longer process your data unless compelling legitimate grounds for the processing exist, or the processing serves the establishment, exercise, or defence of legal claims.

If you wish to exercise these rights, you can do so easily by email to datenschutz@schaebens.de or by post to the address stated under Section 1.

Right to lodge a complaint with a supervisory authority: If you are of the opinion that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. For this purpose, you may contact the supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

For us, the competent data protection authority is: the Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf, email: poststelle@ldi.nrw.de

 

SECTION V: ANALYTICS TOOLS, PLUGINS AND ADERTISING

Facebook / Meta Pixel

We use the visitor action pixel (‘Facebook Pixel’) of the social network Facebook/Meta on this website. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The pixel enables us to track the behaviour of visitors after they have been redirected to our website by clicking on a Facebook/Meta advertisement. This allows us to evaluate the effectiveness of our advertisements for statistical purposes and to optimise future advertising measures. Processing takes place on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, which you may withdraw at any time with effect for the future via our consent management tool. The data collected is anonymous to us as the website operator and does not allow us to draw conclusions about the identity of users. However, Meta stores and processes the data so that a connection to the respective user profile is possible. Meta may use this data for its own advertising purposes in accordance with the Meta Data Policy (https://www.facebook.com/about/privacy/). This enables Meta and its partners to place advertisements on Facebook and outside of Facebook. We point out that data transfers to third countries, in particular the USA, cannot be excluded. According to Meta, such transfers are based on the EU Commission’s Standard Contractual Clauses (https://www.facebook.com/legal/EU_data_transfer_addendum). Details of the joint controllership with Meta can be found in the agreement pursuant to Art. 26 GDPR: https://www.facebook.com/legal/controller_addendum. If you have a Facebook account, you can adjust your advertising settings accordingly at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. Users without a Facebook account can deactivate usage-based advertising from Meta via the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Pinterest Conversion Tracking

We use Pinterest’s conversion tracking technology on our website (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland). This allows us to show relevant advertising on Pinterest to visitors to our website who are Pinterest members. For this purpose, a conversion tracking pixel from Pinterest is embedded on the basis of your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Through this pixel, Pinterest is informed that you have visited our website and which content you have accessed (e.g. interest in a subscription). Pinterest can associate this information with your Pinterest account and show you suitable advertisements there. We ourselves do not, in this respect, receive any information that would allow individual users to be identified. The processing of data is carried out by Pinterest; transfers to third countries, in particular the USA, cannot be excluded. According to Pinterest, such transfers are based on the EU Commission’s Standard Contractual Clauses. Further information can be found in Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy. You may withdraw your consent at any time with effect for the future via our consent management tool. Pinterest users can also deactivate the collection of data for interest-based advertising in their account settings: https://www.pinterest.de/settings or https://help.pinterest.com/de/article/personalization-and-data#info-ad

Matomo

We use the open-source web analytics service Matomo on this website to evaluate usage of our website and to regularly improve our website. Matomo enables us to analyse user behaviour and optimise our services. For this purpose, Matomo sets cookies that are stored on your device and allow an analysis of website use. The information generated by the cookies about your use of this website is stored exclusively on our servers. Your IP address is immediately anonymised in the process, so that direct personal identification is excluded. The use of Matomo is based on your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, which you may withdraw at any time via our consent management tool. If you wish to withdraw your consent or deactivate Matomo, you can do so at any time here. In this case, an opt-out cookie preventing future collection of your data will be set. If you delete your cookies, the opt-out must be reactivated. The data collected by Matomo is not passed on to third parties. Further information on data protection at Matomo can be found at: https://matomo.org/privacy/.

DoubleClick

We use functions of DoubleClick (Google Marketing Platform) on our website. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland. DoubleClick is used to show interest-based advertisements across the whole Google advertising network. With DoubleClick, advertisements can be tailored to the interests of individual users, e.g. in Google search results or in advertising banners linked to DoubleClick. For this purpose, DoubleClick uses cookies or comparable recognition technologies. The information collected (e.g. websites visited, clicks, interactions) can be associated with a pseudonymous user profile in order to show you interest-based advertising. The use of DoubleClick is based on your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, which you may withdraw at any time via our consent management tool. We point out that data transfers to third countries, in particular the USA, cannot be excluded when using Google services. Google relies on the EU Commission’s Standard Contractual Clauses for such transfers. (https://business.safety.google/adsprocessorterms/). Further information on Google’s data processing can be found at: https://policies.google.com/technologies/ads.

Borlabs Cookie

We use the consent technology ‘Borlabs Cookie’ on our website to obtain your consent for the storage of certain cookies or the use of specific technologies, and to document this in compliance with data protection requirements. The provider is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg. When you enter our website, a technically necessary Borlabs Cookie is stored in your browser. This cookie records the consents you have given or revoked. This data is not passed on to the provider of Borlabs Cookie. The data collected is stored until you delete the Borlabs Cookie in your browser yourself or the purpose for storage ceases to apply. Mandatory statutory retention obligations remain unaffected. The use of the Borlabs Cookie consent technology is based on Art. 6 (1) (c) GDPR (legal obligation to obtain consents) and Art. 6 (1) (f) GDPR (legitimate interest in legally compliant and user-friendly consent management). Details of data processing by Borlabs Cookie can be found at: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Google services

We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’) in our web and app offerings. When these services are used, information relating to your usage, your device, and, where applicable, pseudonymised or anonymous data is processed depending on the purpose. Data processing takes place either on the basis of your consent pursuant to Section 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR or – where explicitly stated – on the basis of our legitimate interest pursuant to Section 25 (2) TDDDG in conjunction with Art. 6 (1) (f) GDPR. You have the right to withdraw your consent at any time with effect for the future, for example by adjusting your settings in your Google account accordingly. Where data is transferred to the USA in connection with these services, this is carried out either on the basis of the Standard Contractual Clauses approved by the EU Commission (Art. 46 (2) (c) GDPR) or on the basis of Google’s certification under the EU–U.S. Data Privacy Framework pursuant to Art. 45 GDPR.

  • Google Ads Conversion

We use Google Ads on our website. Google Ads is an online advertising programme of Google Ireland Limited (‘Google’). Google Ads enables us to display advertisements in the Google search engine or on third-party websites when users enter certain search terms on Google (keyword targeting).

In addition, Google may display targeted advertisements based on user data (e.g. location and interests) available to it (audience targeting). As the website operator, we can quantitatively evaluate this data, for example by analysing which search terms led to the display of our advertisements and how many advertisements resulted in corresponding clicks.

Further information on the handling of your data can be found in the privacy statement at: https://policies.google.com/privacy/frameworks  and https://privacy.google.com/businesses/controllerterms/mccs/ .

The use of this service is based on your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Consent may be withdrawn at any time.

  • Google Tag Manager

We use Google Tag Manager on our website. The provider is Google Ireland Limited (‘Google’). Google Tag Manager is a tool that enables us to integrate tracking or analytics tools and other technologies into our website.

Google Tag Manager itself does not create user profiles, store cookies, or carry out independent analyses. It merely serves to manage and deploy the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the USA. The purpose is to enable the quick and straightforward integration and management of various tools on our website.

Where corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

  • Google AdSense

We use Google AdSense on our website. The provider is Google Ireland Limited (‘Google’). We show Google Ads advertisements and, in this context, also use Google Remarketing and Conversion Tracking (see Google Ads Conversion). The advertisements are shown on websites within the Google advertising network based on search queries.

In addition, we use Ads remarketing lists for search advertisements. The aim is to show users of our website interest-based advertising on other websites within the Google advertising network (as a ‘Google advertisement’ in Google search or on other websites). Further information on data protection in connection with Google Ads can be found at: https://policies.google.com/technologies/ads?hl=de

Outbrain

Outbrain is integrated into our website. The provider is Outbrain Inc., 39 West 13th Street, 3rd Floor, New York, NY 10011, USA (‘Outbrain’). When you access a website where Outbrain is integrated, Outbrain creates a pseudonymous user profile (User ID) in which it stores information about the content you have viewed or read.

Subsequently, you may be recommended further interest-based content, or shown advertising, on our website or on other websites where Outbrain is integrated. For this purpose, information such as your device type, IP address, browser type, websites visited and articles read, time of access, and device ID is stored and combined within your User ID.

Further information on the handling of user data can be found in Outbrain’s privacy statement at: https://www.outbrain.com/legal/privacy#privacy-policy. If you wish to view or adjust your interest profile at Outbrain, please use the following link: https://my.outbrain.com/recommendations-settings/home .

Where consent has been obtained, the use of the above service is based exclusively on Art. 6 (1) (a) GDPR and Section 25 TDDDG. Consent may be withdrawn at any time. Where no consent has been obtained, the use of this service is based on Art. 6 (1) (f) GDPR; the website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising.

The use of this service is based on your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Consent may be withdrawn at any time.

Adition

We use the web tracking service of Virtual Minds GmbH, Ellen-Gottlieb-Straße 16, 79106 Freiburg in Breisgau, Germany (‘Adition’) to tailor our website to demand.

Adition uses cookies in the context of web tracking, which are stored on your computer and enable an analysis of your use of our website and your browsing behaviour (‘tracking’). We carry out this analysis on the basis of Adition’s tracking service in order to continuously optimise our online offering and make it more accessible. In the course of using our website, data, in particular your IP address and your user activities, is transmitted to Adition’s servers and processed and stored within the European Union.

The data collected is stored until you request deletion, delete the Adition cookie yourself, or the purpose for storage ceases to apply. Mandatory statutory retention periods remain unaffected. Further information on the handling of transferred data can be found in Adition’s privacy statement: https://www.adition.com/kontakt/datenschutz/.

 

SECTION VI: AUTOMATED DECISION-MAKING

Automated decision‑making, including profiling pursuant to Art. 22 GDPR, does not take place on our website.

 

SECTION VII – TECHNICAL AND ORGANISATIONAL MEASURES 

We implement appropriate technical and organisational measures (TOMs) pursuant to Art. 32 GDPR to ensure a level of protection of your personal data appropriate to the risk. These measures include in particular:

  • encryption of data transmissions (e.g. TLS/SSL)
  • access restrictions and role-based permissions
  • logging of access relevant to security
  • regular security and penetration tests
  • hosting of systems in secured data centres within the EU
  • data processing agreements with all external service providers

We review these measures regularly and adapt them to the state of the art and to statutory requirements.

 

SECTION VIII – OBJECTING TO MARKETING EMAILS

We hereby expressly object to contact details that have been published in accordance with legal notice obligations being used for the purpose of sending unsolicited marketing or informational materials, or for marketing calls. Unsolicited marketing calls, marketing emails, or similar forms of contact constitute a violation of competition law and may be subject to legal action.

SECTION VIIII – RIGHT TO AMEND

We reserve the right to amend this privacy statement in compliance with statutory provisions. (Last updated: November 2025)