1 YOUR PRIVACY IS OUR CONCERN
We appreciate your interest in our company and our products and services and would like you to feel secure when visiting our website, also with regard to the protection of your personal data. We take the protection of your personal data very seriously. Compliance with the provisions of the General Data Protection Regulation (GDPR) is important to us. We want you to know when we collect which data and how we use it. We have taken technical and organisational measures to ensure that the data protection regulations are observed both by us and by external service providers.
2 PERSONAL DATA
Personal data is information about your identity. This includes, for example, information such as name, address, telephone number, email address. It is not necessary for you to disclose personal data in order to use our website. However, in certain cases we need your name and address and other information so that we can provide the requested services.
The same applies, for example, to the sending of information material and goods ordered or to the answering of individual questions. Where this is necessary, we will inform you accordingly. In addition, we only store and process data that you provide to us voluntarily or automatically.
If you make use of services, generally only those data are collected which we need to provide the services. As far as we ask you for further data, it is voluntary information. The processing of personal data takes place exclusively for the fulfilment of the requested service and for the protection of own justified business interests.
Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect them and do not pass them on to third parties.
3 USE OF THE PERSONAL DATA
We generally use the personal data you provide to answer your inquiries, process your orders or provide you with access to certain information or offers. In order to maintain customer relationships, it may also be necessary for us or a service company commissioned by us to use this personal data to inform you about product offers that are useful for your business activities or to conduct online surveys in order to better meet the tasks and requirements of our customers.
Of course we respect it if you do not wish to provide us with your personal data to support our customer relationship (especially for direct marketing or market research purposes). We will neither sell your personal data to third parties nor market it in any other way.
4 EARMARKED USE
We will collect, process and use the personal data you provide online only for the purposes disclosed to you. Your personal data will not be passed on to third parties without your necessary consent.
Personal data is only collected and transmitted to government institutions and authorities entitled to receive information in accordance with the relevant laws or if we are obliged to do so by a court decision. Our employees and the service companies commissioned by us are bound to secrecy and compliance with the provisions of the General Data Protection Regulation (GDPR).
5 NON-PERSONAL DATA COLLECTED AUTOMATICALLY
When using our website, the following data is stored for organizational and technical reasons: the names of the pages accessed, the browser and operating system used, date and time of access, search engines used, names of downloaded files and their IP address.
We evaluate this technical data anonymously and for statistical purposes only in order to be able to continuously optimize our Internet presence and make our Internet offerings even more attractive. These anonymous data are stored separately from personal information on secure systems and do not allow any conclusions about an individual person. Your personal data and your privacy are therefore protected at all times.
6 COOKIES AND WEB-TRACKING
You can explain the consent or rejection of cookies - also for web tracking - via the settings of your web browser. You can adjust the settings of your web browser to notify you when cookies are set or to reject cookies in general. However, you will then no longer be able to use all the functions of our website. The following links provide information on this option for the most frequently used browsers: Internet Explorer, Firefox, Google Chrome, Safari, Opera
6.1 GOOGLE ANALYTICS
This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses "cookies". The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, Google will previously reduce your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of Sorpetaler Fensterbau GmbH, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide Sorpetaler Fensterbau GmbH with other services relating to website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
6.2 GOOGLE ADWORDS CONVERSION TRACKING
6.3 USE OF THE REMARKETING OR "SIMILAR TARGET GROUP" FUNCTION OF GOOGLE INC.
6.4 GOOGLE MAPS
This website uses the Google Maps API, a map service of Google Inc. "("Google"), to display an interactive map. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States.
6.5 GOOGLE TAG MANAGER
Google Tag Manager is also a Google product that allows us to manage website tags through a single interface. The Tag Manager is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. In addition, from time to time our developers review website usage information to further optimize the website. However, we will never share such information with other Google products without your consent. Further information can be found in the http://www.google.de/tagmanager/use-policy.html for the product.
6.6 BING ADS
Our online services also use conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads will place a cookie on your computer if you access our website via a Microsoft Bing ad. Microsoft Bing and we can see in this way that someone has clicked on an ad, has been redirected to our website and has reached a previously defined target page (conversion page). We only see the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the identity of the user will be disclosed. If you do not wish to participate in the tracking process, you can also reject the setting of a cookie required for this - for example using a browser setting that generally deactivates the automatic setting of cookies. For more information about Microsoft Bing's privacy practices and cookies, visit the Microsoft Web site.
6.7 USAGE-BASED INFORMATION (RETARGETING)
In order to be able to tailor our online marketing on the websites of our retargeting partners more specifically to your needs and interests, we use so-called retargeting technologies. Your interest in our products and services is stored in cookies. These cookies are read and used when visiting other websites that cooperate with our retargeting partners in order to inform you as interest-related as possible. This is done anonymously, i.e. they cannot be identified by retargeting.
6.8. USE OF THE FACEBOOK PLUGIN AND THE VISITOR ACTION PIXEL
To continuously improve the user experience on our websites, we use the tool Hotjar (http://www.hotjar.com). All data collected by Hotjar is stored electronically in Ireland, Europe on the Amazon Web Services infrastructure, eu-west-1 Datacenter. Our application servers and database servers run in an Amazon VPC, Virtual Private Cloud. The database with visitor and usage data is only accessible from the application servers and no external sources may connect to the database.
Visitor Privacy: Hotjar assigns a unique user ID, UUID, to visitors to the site so that Hotjar can keep track of returning visitors without relying on personal information, such as their IP address.
IP addresses of visitors are always made anonymous before they are stored. We set the last octet of IPv4 addresses, all connections to Hotjar are made via IPv4 to 0 to ensure that the full IP address is never written to disk. For example, if a visitor's IP address is 220.127.116.11, it is stored as 18.104.22.168. The first three octets of the IP address are only used to determine the geographical position of the visitor.
When collecting data with recordings, Hotjar automatically suppresses keystroke data in password fields and when we find that a credit card number is entered into an input field. We also offer the possibility to manually suppress data for certain input fields or HTML elements. In both cases the data is suppressed on the client side, i.e. in the visitor's browser, i.e. it never reaches our servers.
Further information can be found at: https://help.hotjar.com/hc/en-us/sections/115003180467-Privacy-Security-and-Operations
We have taken technical and organisational security measures to protect your personal data from loss, destruction, manipulation and unauthorised access. All our employees and all third parties involved in data processing are bound by the Federal Data Protection Act and the confidential handling of personal data. Our security measures are continuously revised in line with technological developments.
We reserve the right to change our security and data protection measures if this becomes necessary due to technical developments. In these cases we will also adapt our data protection information accordingly. Please therefore note the current version of our data protection declaration.
If you use external links that are offered within the scope of our Internet pages, this data protection declaration does not extend to these links. When we provide links, we endeavour to ensure that they also comply with our data protection and security standards. However, we have no influence on compliance with data protection and security regulations by other providers. Therefore, please also inform yourself about the data protection declarations provided on the websites of other providers.
10 RIGHT OF ACCESS AND OPPOSITION
You can obtain information about the data we have stored about you at any time. Furthermore, you can revoke your consent to the collection and storage of your personal data by us at any time. If required, please write to Sorpetaler Fensterbau GmbH, e.H. Stefan Appelhans, Data Protection Officer, Selbecke 6, 59846 Sundern or send an e-mail to firstname.lastname@example.org.
11 QUESTIONS, SUGGESTIONS, COMPLAINTS
If you have any further questions regarding our information on data protection and the processing of your personal data, you can contact our data protection officer, Sorpetaler Fensterbau GmbH, Mr. Stefan Appelhans, data protection officer, Selbecke 6, 59846 or by e-mail to email@example.com. He is also available to you in case of requests for information, suggestions or complaints.
12 WHAT DATA PROTECTION RIGHTS DO YOU HAVE?
You have the right to be informed about your personal data stored by us at any time. If any information about you is incorrect or no longer current, you have the right to request it to be corrected. You also have the right to request the deletion or limitation of the processing of your data in accordance with art. 17 or art. 18 DSGVO. You may also have a right to the publication of the data you have provided in a common and machine-readable format (right to data transferability).
If you have given your consent to the processing of personal data for specific purposes, you can revoke your consent at any time with effect for the future. The revocation is to be addressed to the company at the contact address stated under item 10.
In accordance with article 21 DSGVO, you also have the right to object at any time to the processing of your data in accordance with the legal basis of article 6(1)(f) DSGVO for reasons arising from your particular situation. You also have the right to object at any time to the processing of your personal data for the purpose of direct marketing. The same applies to the automated procedures for the use of individual cookies, unless these are absolutely necessary for the provision of the website.
You also have the option of contacting a data protection authority and lodging a complaint there. The authority responsible for the company is the
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Last revised: May 2018