We have appointed a data protection officer pursuant to Art. 37 of the GDPR. You may contact our data protection officer using the following contact details:

MKM Datenschutz GmbH
Äußere Sulzbacher Straße 118
90491 Nuremberg
Germany

E-Mail: DSB@kurz.de
Tel.: +49 911 990 860-0
Website: https://www.mkm-datenschutz.de/

Every time our website is called up, our system automatically records data and information of the access device (e.g. computer, mobile phone, tablet, etc.).

What personal data are collected and to which extent will they be processed?

1. Information about the browser type and the version used;
2. Operating system of the access device;
3. Name of the accessing host;
4. IP address of the access device;
5. Date and time of access;
6. Websites and resources (images, files, other site contents) accessed on our website;
7. Websites from which the user's system accessed our website (referrer tracking);
8. Confirmation whether retrieval was successful;
9. Transferred data volume

These data are stored in our system's log files. These data are not stored together with the personal data of a specific user so that it is not possible to identify individual users of the website.

The legal basis for the processing of personal data

Art. 6 para. 1 lit. f of the GDPR (legitimate interest). Our legitimate interest is to guarantee that the purpose described below is achieved.

Purpose of the data processing

The temporary (automated) storage of data is only required during the website visit so that the website can be provided. Storage and processing of personal data is also required to maintain compatibility of our website for all visitors, as far as possible, and to combat misuse and eliminate faults. It is necessary to log technical data of the accessing computer to be able to react promptly to incorrect visualisation, attacks to our IT systems and/or lack of functionality of our website. Furthermore, this data is used to optimise the website and to generally safeguard the security of our IT systems.

Length of time in storage

The above-mentioned technical data are erased as soon as they are no longer needed to guarantee compatibility of the website for all visitors but at the latest 3 months after you have visited our website.

Right to object and to erasure

You may object to processing any time under Art. 21 of the GDPR and request erasure of data pursuant to Art. 17 of the GDPR. The rights you are entitled to and how to enforce them is described further below in this Privacy Policy.

Our website offers you various functions, during the use of which personal data is collected, processed and stored by us. Below we explain what happens with this data:

Contact form(s)

What personal data are collected and to which extent will they be processed?

The data you entered in our contact forms, which you entered in the input mask of the contact form.

The legal basis for the processing of personal data

Art. 6 para. 1 lit. a GDPR (consent through clear confirming action or behaviour)

Purpose of data processing

We will use the data collected via our contact form or contact forms only for processing the specific contact request received through the contact form. Please note that in order to fulfil your contact request, we may also send you e-mails to the address provided. The purpose of this is so that you can receive confirmation from us that your request has been correctly forwarded. However, the sending of this confirmation e-mail is not obligatory for us and is only for your information.

Length of time in storage

After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.

Right to object and to erasure

The objection and deletion options are based on the general regulations on the right of objection and deletion under data protection law described below in this privacy policy.

The need to provide personal data

The use of the contact forms is on a voluntary basis and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our site. If you wish to use our contact form, you have to fill in the fields marked as mandatory. If you do not fill out the required information of the contact form, you can either not send the request or we can unfortunately not process your request.

Newsletter subscription form

What personal data are collected and to which extent will they be processed?

By registering for the newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, further contact data, provided that you communicate this to us via the newsletter registration form.

The legal basis for the processing of personal data

Art. 6 para. 1 lit. a GDPR (consent through clear confirming action or behaviour)

Purpose of data processing

The data entered in the registration mask of our newsletter will be used by us exclusively for sending our newsletter, in which we inform you about all our services and our latest news. After registration, we will send you a confirmation e-mail containing a link that you have to click to complete the registration for our newsletter (double opt-in).

Length of time in storage

Our newsletter can be unsubscribed at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after unsubscribing, provided that there are no legal retention obligations. Likewise, your data will be deleted by us immediately in the event that your subscription is not completed. We reserve the right to delete without giving reasons and without prior or subsequent information.

Right to object and to erasure

The objection and deletion options are based on the general regulations on the right of objection and deletion under data protection law described below in this privacy policy.

The need to provide personal data

If you would like to receive our newsletter, you have to fill in the fields marked as mandatory and confirm the e-mail address by clicking on the double opt-in link. The newsletter registration information is neither necessary to enter into a contract with us nor legally binding. They are used exclusively for sending our newsletter. If you do not fill in the mandatory fields, we will unfortunately not be able to provide you with our newsletter service.

We collect, process and store the following data when this website or individual files on the website are accessed: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and report on the success of the access (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our Internet offering and for statistical purposes. We also use the following web trackers to evaluate visits to this website:

• Google Analytics
  We use the Google Analytics service of Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: http://www.google.com/ on our website. The transfer of personal data also takes place in the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 DSGVO (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection of the DSGVO applies to the transfer.
  The legal basis for the processing of personal data is your consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, which you have given on our website.
  
  Google Analytics is a web tracker that analyzes the behavior of page visitors and their interactions with our website and provides us with evaluations and forecasts about the content and products of our website and their popularity (so-called tracking). We have integrated Google Analytics so that the service can compile an analysis of page users' browsing behavior. For this purpose, Google collects the page interactions of page visitors with our website and, if applicable, existing information resulting from the reading of cookies or other storage technologies and prepares it statistically for us. Google Analytics uses data processing technologies that enable tracking of individual page visitors and their interaction with other Google services, such as the Google Ads advertising network. Data from other Google services is also used to fill data gaps using machine learning technologies, modeled statistics and forecasting functions, and to generate comprehensive statistics on the content of our website. If Google Analytics is active on our website, the data collected by Google Analytics is transferred to servers of Google Ireland Limited. As part of the order processing, there may also be a transmission of personal data to the servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. We carry out the analysis by Google Analytics in order to constantly optimize our Internet offer and make it more available. This is a so-called range measurement.
  For the processing itself, the service or we collect the following data: Data on the interactions of page visitors with the content of the website, data on the handling of the services presented on our website, data from external Google services, if they interact with our website such as advertising data or data on behavior in relation to advertising, data on the rough geographical origin, the browser used, operating system and other information on the terminal device used.
  
  Google Analytics will store the data relevant for the provision of web tracking for as long as it is necessary to fulfill the booked web service. The data collection and storage is anonymized. If individual interactions of site visitors make it possible to subsequently establish a personal reference to specific actions, we will delete the collected data when the purpose has been achieved. The data will be deleted at the latest when it is not subject to any statutory retention obligations. As a rule, we will delete this data after 12 months at the latest. You can access the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/.
  You can revoke your consent at any time. You can find more information on revoking your consent either with the consent itself or at the end of this privacy policy.
  
  Further information on the handling of the transmitted data can be found in the provider's privacy policy at policies.google.com/privacy.
  The provider also offers an opt-out option at https://tools.google.com/dlpage/gaoptout?hl=de.
   
• Google Tag Manager
  We use the Google Tag Manager service of Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: http://www.google.com/ on our website. The transfer of personal data also takes place in the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 DSGVO (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection of the DSGVO applies to the transfer.
  The legal basis for the processing of personal data is your consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, which you have given on our website.
  
  For processing itself, the service or we collect the following data: Cookies, web tracking data, outgoing or incoming links, information generated by the integration and activation of JavaScript code on the website from Google Tag Manager and the web tools triggered by Google Tag Manager.
  
  You can access the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/.You can revoke your consent at any time. You can find more information about revoking your consent either with the consent itself or at the end of this privacy policy.
  
  For more information on the handling of transferred data, please refer to the provider's privacy policy at https://policies.google.com/privacy.
  The provider also offers an opt-out option at https://policies.google.com/privacy.

On our website, we use active content from external providers, so-called web services. By calling up our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU. You can prevent this by installing an appropriate browser plugin or disabling the execution of scripts in your browser. This may result in functional restrictions on websites that you visit. 

We use the following external web services:
 

• HubSpot Forms by HubSpot
  We use the service HubSpot Forms by HubSpot of the company HubSpot, Inc, 25 First Street, 2141 Cambridge, United States, e-mail: privacy@hubspot.com, website: https://www.hubspot.de/ on our site. The transfer of personal data also takes place to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 DSGVO (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection of the DSGVO applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, which you have given on our website.

  With the help of hsforms, we can provide you with surveys and forms on our website in a simple way.

  You can access the the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov.

  You may revoke your consent at any time. You can find more information about revoking your consent either with the consent itself or at the end of this privacy statement.

  For more information on the handling of transmitted data, please refer to the provider's privacy policy at legal.hubspot.com/de/privacy-policy.
   

• Hubspot
  We use the service Hubspot of the company HubSpot, Inc, 25 First Street, 2141 Cambridge , United States, E-Mail:hubspotgermany@hubspot.com, website: https://www.hubspot.de/ on our site. The transfer of personal data also takes place in the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 DSGVO (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection of the DSGVO applies to the transfer.

  The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO. Our legitimate interest lies in achieving the purpose described below.

  HubSpot is a CRM platform for marketing, sales and service. The service provides us with tools for social media marketing, content management, web analytics, customer service and search engine optimization, among others.
   

  You can access the the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/.

  With regard to the processing, you have the right of objection listed in Art. 21. You will find more detailed information at the end of this privacy policy.

  For more information on the handling of transferred data, please refer to the provider's privacy policy at https://legal.hubspot.com/de/privacy-policy.
   

• Hubspot cookie banner
  We use on our site the service Hubspot-Cookie Banner of the company Hubspot, Inc., 25 First Street, 2141 Cambridge, United States, e-mail: privacy@hubspot.com. The transfer of personal data also takes place in the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 DSGVO (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The operator of the service is certified under the DPF, so that the usual level of protection of the DSGVO applies to the transfer.
  
  The legal basis for the processing is Art. 6 para. 1 lit. c DSGVO. The use of the service supports us in meeting our legal obligations.

  Through the service, a cookie banner is integrated on our site, with which we fulfill our legal obligations.

  You can access the the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/.

  You can find out what rights you have with regard to processing at the end of this privacy policy.

  For more information on the handling of transferred data, please refer to the provider's privacy policy at https://legal.hubspot.com/de/privacy-policy.
   

• LinkedIn
  We use the LinkedIn service of LinkedIn Ireland Unlimited Company, Wilton Place, 2 Dublin, Ireland, e-mail: info_impressum@cs.linkedin.com, Website: https://www.linkedin.com/. on our website. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The operator of the service is certified under the DPF, so that the usual level of protection of the GDPR applies to the transfer. The legal basis for the processing of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have given on our website.

  When using the LinkedIn plugin, we establish a connection to the LinkedIn platform to allow logged-in LinkedIn members the possibility to interact with us.

  You can revoke your consent at any time. Further information on revoking your consent can be found either within the consent itself or at the end of this privacy policy.

  Additional information on how transmitted data is handled can be found in the provider's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

  The provider also offers an opt-out option at https://www.linkedin.com/help/linkedin/answer/68763?lang=de.

• Legal Text Snippets and Modules
  We use the Legal Text Snippets and Modules service provided by Website-Check GmbH, located at Beethovenstraße 24, 66111 Saarbrücken, Germany, Email: support@website-check.de, Website: https://www.website-check.de/. The transmission of personal data exclusively takes place to servers within the European Union.

  The legal basis for processing is Art. 6 para. 1 lit. c GDPR. The use of this service assists us in fulfilling our legal obligations.

  With the help of this service, content of our legal texts is dynamically loaded on our website. The currently applicable legal texts are loaded through this integration on our site. Through this integration, additional technical modules related to legal texts or legally required elements may also be loaded.

  Details about your rights regarding data processing can be found at the end of this privacy policy.

  For more information about how transmitted data is handled, please refer to the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.

What personal data is collected and to what extent is it processed?

On various web sites, we integrate and use cookies to enable certain functions of our website and to integrate external web services. The so-called "cookies" are small text files that your browser can store on your device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also referred to as "setting a cookie". Cookies can be set here both by the website itself and by external web services. Cookies are set by our website or external web services in order to maintain the full functionality of our website, to improve the user experience or to pursue the purpose stated with your consent. Cookie technology also allows us to recognize individual visitors by pseudonyms, such as unique or random IDs, so that we can provide more customized services. More details are provided in the table below.

The legal basis for the processing of personal data

Insofar as the cookies are processed on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR, this consent shall also be deemed to be consent within the meaning of Section 25 para. 1 TTDSG (German Act to Regulate Data Protection and Privacy in Telecommunications and Telemedia) for the setting of the cookie on the user's terminal device. Insofar as another legal basis is mentioned according to the GDPR (e.g. for the fulfilment of a contract or for the fulfilment of legal obligations), the storage or setting takes place on the basis of an exception according to Section 25 (2) TTDSG. This exists "if the sole purpose of storing information in the end user's terminal equipment or the sole purpose of accessing information already stored in the end user's terminal equipment is to carry out the transmission of a message via a public telecommunications network" or "if the storage of information in the end user's terminal equipment or the access to information already stored in the end user's terminal equipment is absolutely necessary in order for the provider of a telemedia service to provide a telemedia service expressly requested by the user". Which legal basis is relevant can be seen from the cookie table provided below.

Purpose of data processing

The cookies are set by our website and/or external web services to achieve full functionality of our website, to improve user-friendliness and to pursue the purpose stated with your consent. Cookie technology allows us to recognise individual visitors based on pseudonyms, such as an individual or random ID, so that we can offer more individualised services. Details are listed in the following table.

Length of time in storage

The cookies listed in the following are stored in your browser until they are deleted or, in case of a session cookie, until the session has expired. Details are listed in the following table:

Right of objection and possibility of removal

You can set your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your device is already connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can withdraw this consent at any time. Please note that the legality of the processing carried out on the basis of the consent until the withdrawal is not affected.

Your personal data will be protected by technical and organisational measures during collection, storage and processing so that third parties cannot access them. In case of unencrypted communication by e-mail, data security during transfer to our IT systems cannot be guaranteed in full by us so that we recommend to send information with a high need for confidentiality in encrypted form or by post.

Right to access

You are entitled to request a confirmation of whether we process your personal data. If this is the case, you have the right to access the information mentioned in Art. 15 para. 1 of the GDPR as long as the rights and freedoms of others are not adversely affected (see Art. 15 para. 4 of the GDPR). We are glad to provide you a copy of this data.

Right to rectification

Under Art. 16 of the GDPR, you are entitled to obtain the rectification of inaccurate personal data (such as address, name, etc.) any time. You may also request any time to have incomplete personal data completed. A corresponding adjustment is made immediately.

Right to erasure

Based on Art. 17 para. 1 of the GDPR, you are entitled to request from us the erasure of your personal data if

• data are no longer required;
• there is no longer any legal ground for processing because you withdraw your consent;
• you object to the processing and there are not any legitimate grounds for the processing;
• your data have been unlawfully processed;
• this is required for compliance with a legal obligation or a collection was based on Art. 8 para. 1 of the GDPR.

According to Art. 17 para. 3 of the GDPR, you do not have this right if

• processing is necessary for exercising the right of freedom of expression and information;
• your data have been collected on the grounds of a legal duty;
• processing is required for reasons in the public interest;
• data are required for the enforcement, exercise or defence of legal claims.

Right to restriction of processing

Under Art. 18 para. 1 of the GDPR, you have the right to restrict the processing of your personal data in certain cases.

This applies if

• the accuracy of the personal data is contested by you;
• processing is unlawful and you oppose the erasure;
• data are no longer required for the purpose of processing, but the collected data are used for enforcement, exercise or defence of legal claims;
• an objection to processing pursuant to Art. 21 para. 1 of the GDPR has been made and the verification whether the legitimate grounds of whom override is still pending.

Right to withdraw your consent

If you have given us your explicit consent to the processing of your personal data [Art. 6 para. 1 lit. f or Art. 9 para. 2 lit. a of the GDPR], you may withdraw it any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw your consent.

Right to object

Pursuant to Art. 21 of the GDPR, you have the right to object at any time to processing of your personal data, which were collected based on Art. 6 para. 1 lit. f GDPR (on the grounds of a legitimate interest). You only have this right if particular circumstances speak against storage and processing.

How do you exercise your rights?

You may exercise your rights any time by contacting us as follows:

SCRIBOS GmbH
Sickingenstraße 65
69126 Heidelberg
Germany
E-mail: info@scribos.de
Phone.: +49-6221-33507-17
Fax: +49-6221-33507-18

Under Art. 20 of the GDPR, you have the right to have your personal data transferred to you. We provide your personal data in a structured, commonly used and machine-readable format. The data can either be transferred to you or a controller you specify.

On request, we provide you the following data acc. to Art. 20 para. 1 of the GDPR:

• data collected based on an explicit consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR;
• data we have received from you for the performance of a contract acc. to Art. 6 para. 1 lit. b GDPR;
• data having been processed in automated procedures.

We will transfer the personal data directly to a controller specified by you insofar as this is technically feasible. Please note that according to Art. 20 para. 4 GDPR we may not transfer data which adversely affect the rights and freedoms of others.

Insofar as you suspect that your data are being processed unlawfully on our website, you may, of course, bring about a judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of that, you may contact a supervisory authority based on Art. 77 para. 1 of the GDPR. You have a right to lodge a complaint pursuant to Art. 77 of the GDPR in the Member State of your habitual residence, place of work or place of the alleged infringement, i.e. you can choose the supervisory authority of one of the above-mentioned places. The supervisory authority with whom the complaint is lodged shall notify you of the status and outcomes of your complaint, including your right to an effective judicial remedy based on Art. 78 of the GDPR.

• SCRIBOS_Privacy_Policy.pdfPDF - 195 KB