Data Protection Statement
1. Name and contact details of the controller or processor and of the company’s Data Protection Officer
Controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR):
Intesia Group Holding GmbH, Otto-Lilienthal-Straße 24, 71034 Böblingen, Germany
Tel: +49 (7031) 436-1000
Fax: +49 (7031) 436-1001
The company’s data protection officer, Stefan Henschel, can be contacted at the above address or by email to: firstname.lastname@example.org
2. Collection and storage of personal data and nature and purpose of its use
a) When you visit our website:
When you visit our website – www.intesia.com – the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until automatically deleted:
IP address of the requesting computer
Date and time of access;
Name and URL of the retrieved file;
Browser used and in some cases your computer’s operating system;
The name of your access provider
We process the above data for the following purposes:
Ensuring unimpeded communication with the website;
Ensuring convenient use of our website;
Analysis of system security and stability;
Other administrative purposes
b) When singing up for our newsletter:
When in accordance with article 6 (1) p. 1 lit. A GDPR you have expressly agreed, we will use your email address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to specify an e-mail address. You can unsubscribe at any time by sending an e-Mail to: email@example.com
c) When you use our contact form:
For questions of any kind, we provide a form on the website for you to contact us. You need to provide a valid email address, forename and surname so that we know who the request is from and in order to respond. Further details can be provided voluntarily. The data is transmitted in encrypted form (see under heading 8). The legal basis for the data processing for the purpose of entering into contact with you is Article 6(1)(a) of the GDPR on the basis of your freely given consent. The personal data we collect for use of the contact form is automatically deleted once your request has been dealt with.
3. Disclosure of data
We do not transfer your personal data to any third party other than for the purposes listed in the following. We only disclose your personal information to third parties if:
If you have given your express consent to it in accordance with Article 6(1)(a) of the GDPR;
Disclosure is necessary in accordance with Article 6(1)(f) of the GDPR for the establishment, exercise and defence of legal claims and there is no reason to assume that you have an overriding compelling interest in the non-disclosure of your data;
The disclosure is necessary in accordance with Article 6(1)(c) of the GDPR for compliance with a legal obligation;
It is lawful and is necessary in accordance with Article 6(1)(b) of the GDPR for the performance of a contract to which you are party
4. CookiesCookie settings
5. Analysis tools
We use the tracking tools listed in the following on the basis of Article 6(1)(f) of the GDPR. Our use of these tracking tools serves the purposes of needs-based design and ongoing improvement of our website. We also use the tracking tools to keep statistics on the use of our website and analyse them for the purpose of improving our content. These are to be considered as legitimate interests within the meaning of the aforementioned provision. Please see the tracking tools for the respective purposes of processing and categories of data.
Our website uses Google Analytics, an internet evaluation service of Google, Inc. (“Google”). Google uses the information stored by cookies (as described above) to evaluate your use of the website, to prepare reports of website activities for website operators and to provide other services associated with website and internet usage. Google processes data on its servers in the United States and in certain circumstances provides compiled, anonymized information to third party developers. You can obtain information about the scope and purpose of the analyses at www.google.com/analytics/tos.html, and you can find Google’s data privacy policies at www.google.com/privacy.html. By using this website, you agree to the forwarding of data to Google and the processing by Google of the data collected from you in the manner and for the purposes described above. If you disagree with this, you may refuse to allow cookies to be saved.
Google Adwords Conversion Tracking
On this website, the controller has integrated Google AdWords. Google AdWords is a service for Internet advertising that allows the advertiser to place ads in Google search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define specific keywords with the help of which an ad on Google’s search results only then displayed, when the user utilizes the search engine to retrieve a keyword-relevant search result. In the Google Advertising Network, the ads are distributed on relevant web pages using an automatic algorithm, taking into account the previously defined keywords. The operating company of Google AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES. The purpose of Google AdWords is the promotion of our website by the inclusion of relevant advertising on the websites of third parties and in the search engine results of the search engine Google and an insertion of third-party advertising on our website. If a data subject reaches our website via a Google ad, a conversion cookie is filed on the information technology system of the data subject through Google. The definition of cookies is explained above. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. If the cookie has not expired, the conversion cookie is used to check whether certain sub-pages, e.g, the shopping cart from an online shop system, were called up on our website. Through the conversion cookie, both Google and the controller can understand whether a person who reached an AdWords ad on our website generated sales, that is, executed or canceled a sale of goods. The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are used in order to determine the total number of users who have been served through AdWords ads to ascertain the success or failure of each AdWords ad and to optimize our AdWords ads in the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the data subject. The conversion cookie stores personal information, e.g. the Internet pages visited by the data subject. Each time we visit our Internet pages, personal data, including the IP address of the Internet access used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties. The data subject may, at any time, prevent the setting of cookies by our website, as stated above, by means of a corresponding setting of the Internet browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on the information technology system of the data subject. In addition, a cookie set by Google AdWords may be deleted at any time via the Internet browser or other software programs. The data subject has a possibility of objecting to the interest based advertisement of Google. Therefore, the data subject must access from each of the browsers in use the link www.google.de/settings/ads and set the desired settings. Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/.
6. Your rights as a data subject
Your rights are as follows:
Right of access: You have the right (under Article 15 of the GDPR) to obtain access to the personal data concerning you that we process. In particular, you have the right to obtain information on the purposes of the processing, the category of personal data, the categories of recipients to whom the personal data has been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure and restriction of processing and of a right to object, the source of your data if it is not collected from you, and the existence of any automated decision-making, including profiling, and meaningful information on the details of any such automated decision-making;
Right to rectification:You have the right (under Article 16 of the GDPR) to obtain rectification or completion of personal data stored with us;
Right to erasure: You have the right (under Article 17 of the GDPR) to obtain erasure of the personal data concerning you that is stored with us to the extent that the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
Right to restriction of processing: You have the right (under Article 18 of the GDPR) to obtain restriction of the processing of your personal data to the extent that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise or defence of legal claims or you have objected to the processing pursuant to Article 21 of the GDPR;
Right to data portability: You have the right (under Article 20 of the GDPR) to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to have the data transmitted to another controller;
Right to withdraw your consent: You have the right (under Article 7(3) of the GDPR) to withdraw the consent that you have given. This has the effect that we are then no longer allowed to continue the data processing based on that consent.
Right to lodge a complaint: You have the right (under Article 77 of the GDPR) to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority for your place of habitual residence or place of work or for our registered office.
7. Right to object
To the extent that your personal data is processed on the basis of legitimate interests in accordance with Article 6(1)(f) of the GDPR, you have the right, under Article 21 of the GDPR, to object, on grounds relating to your particular situation, at any time to the processing of your personal data. In the case of direct marketing, you have a general right to object that we abide by without reference to any particular situation. If you wish to exercise your right to withdraw consent or your right to object, it is sufficient to send an email to: firstname.lastname@example.org
8. Data security
When you visit our website, we use the secure socket layer (SSL) protocol in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit SSL v3 encryption instead. You can tell if a specific page of our website is transferred in encrypted form by the closed key or padlock icon in your browser address bar. In all other respects, we use suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are continually improved in line with technological developments.
9. Validity of and modifications to this Data Protection Statement
This Data Protection Statement is valid as of the present time and was last revised in May 2018. As a result of enhancements to our website and the services provided on it, or as a result of legal or official requirements, it may become necessary for this Data Protection Statement to be revised.