Privacy Policy

Data Privacy Statement

In this data privacy statement, we inform you about the type, scope, and purpose of processing personal data (hereinafter referred to simply as 'data'). Personal data is all data that pertains to you personally, e.g. name, address, email address, or your user behaviour. The data privacy statement applies to all data processing steps performed by us, both in our core business and for the online media we present.

Who is responsible for data processing in our company

The entity responsible for data processing is:

achelos GmbH
Vattmannstraße 1
33100 Paderborn
Germany

Telephone: +49 5251 142120
Fax: +49 5251 14212100
Email: datenschutz@achelos.de

Contact details of our data protection officer

Annette Kalz
Telephone: +49 5251 14212-200

You can contact our data protection officer by email at datenschutz@achelos.de or at our postal address with the note 'For the attention of the data protection officer'.

Processing of your data within the core business of our company

If you are our customer or business partner or are interested in our services, the type, scope, and purpose of the processing of your data depend on the contractual or precontractual relationships existing between us. In this sense, the data we process includes all data that is or has been provided by you for the purpose of making use of the contractual or precontractual services and that is required for processing your enquiry or the contract concluded between us. Unless stipulated otherwise by the remaining points in this data privacy statement, processing of your data and its transmission to third parties is limited to data that is required and appropriate for answering your enquiries and/or fulfilling the contract concluded between you and us, for protecting our rights, and for fulfilling legal duties. We will inform you of which data is required for these purposes before or within the course of data collection. Insofar as we use third-party suppliers to provide our services, the data privacy statements of the respective third-party supplier apply.

Data affected:

  • Inventory data (for example name, address)
  • Payment data (for example bank details, invoices)
  • Contact data (for example email address, telephone number, postal address)
  • Contractual data (for example object of the contract, duration of the contract)

Persons affected: Interested parties, business partners, and contractual partners

Purpose of processing: Processing of contractual services, communication and answering contact enquiries, office and organisational procedures

Legal basis: Performance of a contract and precontractual enquiries, Art. 6 (1) (b) GDPR; legal obligation, Art. 6 (1) (c) GDPR; legitimate interests, Art. 6 (1) (f) GDPR

Your rights under the GDPR

In accordance with the GDPR, you are entitled to the rights detailed below, which you may assert at any time before the data protection officer stated in Section 1 of this data privacy statement:

  • Right of access: You have the right to obtain information from us regarding whether and which data of yours we process.
  • Right to rectification: You have the right to obtain rectification of inaccurate or incomplete data.
  • Right to erasure: You have the right to obtain the erasure of your data.
  • Right to restriction of processing: In certain cases, you have the right to request that we restrict processing of your data.
  • Right to data portability: You have the right to request that we transmit your data to you or another controller in a structured, commonly used, and machine-readable format.
  • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The supervisory authority for your usual place of residence, your workplace, or our company headquarters is responsible.

Right of revocation

You have the right to revoke your consent to data processing at any time.

Right to object

You have the right to object at any time to the processing of your data, which we perform in pursuit of our legitimate interests pursuant to Art. 6 (1) (f) GDPR. Should you exercise your right to object, please state your reasons for doing so. We will then no longer process your personal data unless we can demonstrate to you compelling legitimate grounds for the processing which override your interests and rights.

Irrespective of the above, you have the right to object to processing of your personal data for the purposes of advertising and data analysis at any time.

Please address your objection to the contact address of the data protection officer named above.

When do we erase your data?

We erase your data when we no longer need it or when you request that we do so. This means that – unless stipulated otherwise in the individual data privacy notices of this data privacy statement – we erase your data

  • if the purpose of data processing ceases to exist and the relevant legal basis stipulated in the individual data privacy notices thereby ceases to exist, so for example
    • after the contractual or membership relationships existing between us end (Art. 6 (1) (a) GDPR) or
    • after cessation of our legitimate interest in the continued processing or storage of your data (Art. 6 (1) (f) GDPR),
  • if you exercise your right of revocation and no other legal basis for the processing as per Art. 6 (1) (b-f) GDPR applies,
  • if you exercise your right to object and there are no compelling legitimate grounds against erasure.

If, however, we must retain (certain parts of) your data for other purposes because this is required due to fiscal retention periods (generally 6 years for business correspondence or 10 years for accounting vouchers) or the assertion, exercise, or defence of legal rights arising from contractual relationships (up to four years) or the data is required to protect the rights of another individual or legal entity, we will erase (the part of) your data only after expiry of these periods. Until expiry of these periods, however, we will limit processing of this data to these purposes (fulfilment of the duty to preserve records).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters which are recorded and saved on the device you use. Cookies primarily serve to exchange data between the device you use and our website. This includes the language settings on a website, the login status or the position at which a video was watched.

Two types of cookies are used when you visit our websites:

  • Temporary cookies (session cookies): These save what is known as a session ID, which is used to assign various queries from your browser to the shared session. The session cookies are deleted when you log out or close your browser.
  • Permanent cookies: Permanent cookies remain stored even after you close your browser. This is how our website recognises you when you return to our website. These cookies save information such as language settings or login information. In addition, your surfing behaviour can be documented and saved with these cookies. This data can be used for statistical, marketing, and personalisation purposes.

Alongside the classification above, cookies can also be differentiated in terms of their purpose of use:

  • Necessary cookies: These are cookies which are absolutely necessary for the operation of our website in order to save logins or shopping baskets for the duration of your session, or cookies which are saved for security reasons.
  • Statistical, marketing, and personalisation cookies: These are cookies which are used for the purpose of analysis or reach measurement. Such 'tracking' cookies can be used in particular to save information regarding search terms entered or the frequency of page requests. In addition, however, the surfing behaviour of an individual user (e.g. viewing certain content, use of functions, etc.) can be saved in a user profile. Such profiles are used to show users content that corresponds to their potential interests. Where we use services that save cookies for statistical, marketing, and personalisation purposes on your device, we will notify you of this separately in the following sections of our data privacy statement or within the course of obtaining your consent.

Data affected:

  • Usage data (for example access times, websites clicked)
  • Communication data (for example information regarding the device used, IP address).

Persons affected: Users of our online offers

Purpose of processing: Displaying our websites, guaranteeing the operation of our websites, improvement of our internet offering, communication, and marketing

Legal basis:
Legitimate interests, Art. 6 (1) (f) GDPR
Where we do not request your consent to setting cookies, we base the processing of your data on our legitimate interests in improving the quality and usability of our internet presence, in particular the content and functions. You may object to the use of the cookies set by us within the scope of our legitimate interests via the security settings of your browser. There you can define in advance whether you want to accept no cookies or only accept cookies upon request, or stipulate that cookies are deleted each time you close your browser. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

Consent, Art. 6 (1) (a) GDPR
Where we ask you whether we can set certain cookies on your device before you visit our internet presence and you consent to this, the consent you grant shall constitute the legal basis. We will inform you when obtaining consent of which cookies we use. If you do not grant such consent, only the technically necessary cookies required for proper use of our web pages and their display in your browser will be used. If you have consented to the use of cookies, you may revoke such consent at any time.

Web hosting

To maintain our internet presence, we use a provider on whose servers our web pages are saved and made available for use on the internet (hosting). The provider is able to process all the data transmitted via the browser used by you and generated by the use of our web pages. In particular, this includes your IP address, which the provider requires in order to deliver our online offering to the browser you use as well as all input you enter via our website. In addition, the provider we use can gather  

  • the date and time of access to our website
  • time zone differences from Greenwich Mean Time (GMT)
  • access status (HTTP status)
  • the data volume transmitted
  • the internet service provider of the accessing system
  • the browser type and version used by you
  • the operating system used by you
  • the website from which you may have accessed our website
  • the pages or sub-pages which you visit on our website.

  The aforementioned data is saved as log files on the servers of our provider. This is necessary in order to ensure the stability and security of the operation of our website.

Email dispatch: In addition to the hosting of our website, we have also commissioned our provider to send, receive, and store our emails. To do this, our provider processes the email addresses of the recipients and senders as well as other data generated during email communication (meta communication data such as time, IP address, etc.) and the content of the respective emails. We would like to point out to you that emails are sent in unencrypted form as a general rule. We therefore assume no responsibility for the transmission path of the emails between the sender and receipt on our server.

Data affected:

  • Content data (for example posts, photos, videos)
  • Usage data (for example access times, websites clicked)
  • Communication data (for example information regarding the device used, IP address)

Persons affected: Users of our online presence

Purpose of processing: Displaying our web pages, guaranteeing the operation of our web pages

Legal basis: Legitimate interests, Art. 6 (1) (f) GDPR

Web hoster: achelos GmbH

 

Contact

If you contact us via email, social media, telephone, fax, mail, our contact form, or otherwise and provide us in doing so with personal data such as your name, telephone number, or email address, or provide other details regarding your person or concern, we will process this data in order to respond to your request within the scope of the precontractual or contractual relationships existing between us.

Data affected:

  • Inventory data (for example name, address)
  • Contact data (for example email address, telephone number, postal address)
  • Content data (texts, photos, videos)
  • Contractual data (for example object of the contract, duration of the contract)

Persons affected: Interested parties, customers, business partners, and contractual partners

Purpose of processing: Communication and answering contact enquiries, office and organisational procedures

Legal basis: Performance of a contract and precontractual enquiries, Art. 6 (1) (b) GDPR; legitimate interests, Art. 6 (1) (f) GDPR

Web analysis and statistics

In order to record and statistically evaluate the streams of visitors to our online presence, we use web analysis services. Such services record data including the website from which you accessed our website (known as referrers), which pages of our online presence you accessed, how long you visited our pages for, and which interaction you made there. In addition, data is recorded on the browser, computer system, and device type that you use. Furthermore, such a service can gather demographic information such as age or gender, for example, as pseudonymous values. If you have consented to the collection of you location data, this data can also be processed, depending on the provider.

In order to gather and save this data, the web analysis service we use sets a cookie on the device you use which also gathers the IP address assigned to you. However, this is abbreviated via an IP masking procedure so that the IP address can no longer be associated with your visit to our website. No personally identifiable data such as name or email addresses is saved. Neither we nor the service we use knows the identity of the visitors to our web pages.

We would like to point out to you that, depending on the country in which the service provider stated below is headquartered, the data gathered via the service may be transferred and processed outside the territory of the European Union. In this case there is a risk that the data privacy level stipulated by the GDPR may not be adhered to and that it may be difficult or impossible to assert your rights.

Data affected:

  • Usage data (for example access times, websites clicked)
  • Communication data (for example information regarding the device used, IP address).

Persons affected: Users of our online offers

Purpose of processing: Reach measurement, success monitoring of campaigns, remarketing, and interest-based and behaviour-based marketing

Legal basis: If we asked you for your consent before using the respective service, the legal basis resides herein, Art. 6 (1) (a) GDPR. Otherwise, we use the respective service based on our legitimate interests in analysing the stream of visitors to our websites so that we can continuously improve the functions, offerings and user experience, Art. 6 (1) (f) GDPR.

We use the following web analysis services:

Google Analytics

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Data privacy statement: https://policies.google.com/privacy?hl=de
Opt-out option: If you do not want your data to be used by Google Analytics, you can use what is a known as an opt-out plugin, which will prevent your data from being gathered on our website in future. You can get this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de

Our online presences on social networks

We operate online presences within the social networks listed below. If you visit one of these presences, the respective provider gathers and processes the data listed in detail below. Generally, this data is gathered for advertising and marketing purposes and is used to create usage profiles. In the usage profiles, data can be saved independently of the device you use. This is particularly the case if you are a member of the respective platform and are logged in to it. The usage profiles can be used by the providers to display interest-related advertising to you. You have a right of revocation against the creation of user profiles. In order to exercise this right, you must contact the provider concerned.

If you have an account with one of the providers listed below and are logged into it when you visit our website, the provider in question can gather data on your usage behaviour on our website. In order to prevent such a link to your data, you can log out from the provider's service before visiting our site.

You can find out for what purpose and to which extent data is gathered by the provider in the providers' data privacy statements listed below.

We would like to point out to you that, depending on the country in which the provider stated below is headquartered, the data gathered via its platform may be transferred and processed outside the territory of the European Union. In this case there is a risk that the data privacy level stipulated by the GDPR may not be adhered to and that it may be difficult or impossible to assert your rights.

Data affected:

  • Inventory and contact data (for example name, address, telephone number, email address)
  • Content data (for example posts, photos, videos)
  • Usage data (for example access times, websites clicked)
  • Communication data (for example information regarding the device used, IP address).

Purpose of processing: Communication and marketing, tracking and analysis of user behaviour

Legal basis: Consent, Art. 6 (1) (a) GDPR; legitimate interests, Art. 6 (1) (f) GDPR

Options to object: With regard to the relevant objection options (opt-out), we refer to the provider details linked to below.

We run online presences on the following social networks:

LinkedIn

Service provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA
Headquarters in Germany: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 München
Website: https://www.linkedin.com/?trk=nav_logo
Data privacy statement: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

XING

Service provider: New Work SE, Dammtorstraße 30, 20354 Hamburg
Website: https://www.xing.com/
Data privacy statement: https://privacy.xing.com/de/datenschutzerklaerung

Content services

We use certain services in order to be able to display certain content or graphics via our internet presence (videos, images, music, fonts, map material). In doing this, the services we use process the IP address assigned to you at the time of your visit to our web pages, as this is the only way the respective content can be displayed in the browser you use. Furthermore, the providers of these services can set other cookies on your device which are used to gather information on your usage behaviour, interests, the device you use, and the browser used as well as the time and duration of your session. The providers regularly use this data for analysis, statistical, and marketing purposes. In addition, this information can also be linked with information from other sources. This is particularly true if you have an account yourself with the service provider and are logged in at the time of your session.

We would like to point out that, depending on the country in which the service provider stated below is headquartered, the data specified in detail below may be transferred to and processed on servers outside the territory of the European Union. In this case there is a risk that the data privacy level stipulated by the GDPR may not be adhered to and that it may be difficult or impossible to assert your rights.

Data affected:

  • Usage data (for example access times, websites clicked)
  • Communication data (for example information regarding the device used, IP address)

Persons affected: Users of our online presence

Purpose of processing: Displaying our web pages, offering content, guaranteeing the operation of our web pages

Legal basis: Consent via cookie consent banner, Art. 6 (1) (a) GDPR; legitimate interests, Art. 6 (1) (f) GDPR

We use the following content services:

Google Maps

We use Google Maps on our internet presence. Google gathers and processes the IP address of the visitor when using this service. If you visit a webpage which links to Google Maps, your IP address and your location (the latter generally not without your consent) is transmitted to Google, irrespective of whether you actually use Google Maps or are logged in to your Google account. Your IP address is assigned to your Google account if you are logged into it when you visit our online presence.

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.de/maps
Data privacy statement: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

Google Web Fonts

With Google Web Fonts we are able to incorporate web fonts into the design of our website and output them correctly when displaying our web pages in your browser. These web fonts are incorporated by means of a server request with Google. From there, the fonts are sent to your browser in compressed form and unzipped there. This server is regularly in the USA. If you visit one of our pages on which we incorporate Google Fonts, Google is informed of which of our web pages you have visited.

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://fonts.google.com/
Data privacy statement: https://policies.google.com/privacy

YouTube

We use components of YouTube on our website in order to incorporate videos on our web pages so that they can be played via your internet browser when you visit our web pages. During your visit to our web pages, both YouTube and Google are informed of which page or sub-page you have requested in that your IP address is transmitted to the external servers of Google in the USA. This information is transmitted irrespective of whether you actually watch or click on the displayed videos or are logged into your YouTube or Google account. This information is gathered and assigned to your Google account, if you are logged into it, when you call up our web pages.

Service provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Website: https://www.youtube.com/
Data privacy statement: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

Security measures

We otherwise perform technical and organisational security measures in line with the latest technology in order to comply with the provisions of data privacy laws and to protect your data from coincidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties.

Validity of and changes to this data privacy statement

This data privacy statement is currently valid and was last updated in October 2020. Due to altered legal or official provisions, it may be necessary to amend this data privacy statement.

This data privacy statement was created with the help of the Datenschutz-Generator from SOS Recht. SOS Recht is an offering of Mueller.legal solicitor partnership based in Berlin.