Data privacy declaration

We are very pleased that you are interested in our company. Data privacy is taken especially very seriously by the company management of Green Wood International AG. It is basically possible to use the Internet pages of Green Wood International AG without giving any personal data at all. However, if a person concerned which to make use of any special services of our company via our Internet site, then the processing of personal could become necessary. If the processing of this personal data is essential and there is no legal basis for such processing, then in general we obtain the consent of the person concerned.

The processing of personal data, for example, the name, address, e-mail address or telephone number of the person concerned is always done in accordance with the German Data Privacy Law and in compliance with the country- and Federal state-specific regulations concerning data privacy that apply to Green Wood International AG. Our company wishes to inform the general public through this data privacy declaration about the type, scope and purpose of the personal data that is collected, used and processed by us. In addition, the persons concerned are informed about the rights that they have by means of this data privacy declaration.

Green Wood International AG has implemented for the person responsible for processing numerous technical and organisational measures to ensure protection that is as seamless as possible for the personal data that is processed via this Internet site. Nonetheless, Internet-based data transfers are fundamentally at risk from security loopholes so that it is not possible to guarantee absolute protection. For that reason, each person concerned is free to convey personal data to us by alternative means, such as by telephone.

1. Definition of terms

The data privacy declaration of Green Wood International AG is based on the terms that are also used by the European regulatory and legislative authorities when promulgating the German Data Privacy Law (GDPR). Our data privacy declaration is intended to be easy to read and understand both for the general pubic as well as for our customers and business partners. We would like to explain the terms used so as the ensure this. In this data privacy declaration we use the following terms, among others:

a) Personal data
Personal data is all information that relates to an identified or identifiable natural person (hereinafter referred to as "person concerned"). A natural person is regarded as identifiable if he or she can be identified directly or indirectly, and especially by means of allocation to an identifier such as a name, a n identification number, location data, an online identifier or from one or more special characteristics that express the physical, physiological, genetic, psychic, economic, cultural or social identity of this natural person.

b) Person concerned
The person concerned is any identified or identifiable natural person whose personal data is to be processed by the person responsible for data processing.

c) Processing
Processing is an operation that is carried out with or without the aid of automated procedures or any such process sequence in connection with personal data such as collection, recording, organising, arranging, assigning, storing, modifying or amending, reading, querying, use, publication by transfer, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.

d) Restriction of processing
The restriction of processing is the marking of saved personal data with the aim of restricting its future processing.

e) Profiling
Profiling is any type of automated processing of personal data in which the personal data is used to assess certain personal aspects that relate to a natural person, and in particular to analyse or forecast aspects concerning working performance, economic situation, health, personal preferences, interests, reliability, behaviour, place of residence or change of location of this natural person.

f) Pseudonymization
Pseudonymization is the processing of personal data in a way such that this data can no longer be assigned to a specific person concerned without bringing in additional information as long as this additional information is stored separately ad is subject to technical and organisational measures that ensure that the personal data cannot be assigned to an identified or identifiable natural person.

g) Responsible person or person responsible for processing
The responsible person or the person responsible for processing is the natural or juridical person, authority, facility or other body that alone or jointly decides on the purposes and means for the processing of personal data. If the purposes and means of this processing are specified by EU law or the laws of the member states, then the responsible person or the person responsible for processing can make use of the specific criteria of his designation in accordance with EU law or the laws of the member states

h) Processor
A processor is a natural or juridical person, authority, facility or other body that process the personal data to the order of the responsible person.

i) Recipient
The recipient is a natural or juridical person, authority, facility or other body that publishes personal data, regardless of whether or not it involves third parties at that body. Authorities who may possibly receive personal data as part of an investigation commission in accordance with EU law or the law of the member states are not, however, regarded as recipients.

j) Third party
A third party is a natural or juridical person, authority, facility or other body apart from the person concerned, the responsible person, the processor and persons who have been given the direct responsibility by the responsible person or the processor to process the personal data.

k) Consent
Consent is any form of statement of assent voluntarily given by the person concerned for the specific case in an informed way and with no possibility of being mistaken in the form of a declaration or other unmistakable confirmatory action by which the person concerned gives to understand that he or she agrees to the processing of the personal data in question.

2. Name and address of the person responsible for the processing

The responsible person within the meaning of the German Data Privacy Law and of the relevant applicable data privacy laws and other regulations with a data privacy character within the member states of the European Union is::
Green Wood International AG
Stadtwald 3
CH-9400 Rorschach
E-mail: info@treeme.com
Telephone: +41 58 680 30 40
Web: www.green-wood-international.com

3. Cookies

The Internet pages of Green Wood International AG use cookies. Cookies are text files that are created and stored on a computer system by an Internet browser. Numerous Internet pages and Servers use cookies. Many cookies include a so-called cookie ID. A cookie ID is a unique labelling of the cookie. They consist of a series of characters, through which Internet pages and Servers are assigned to the specific Internet browser concerned in which the cookie had been saved. This makes it possible for the Internet sites and Servers that had been visited to distinguish the individual Internet browser of the person concerned from other Internet browsers that contain other cookies. A particular Internet browser can be recognised and identified from the unique cookie ID.

By using cookies Green Wood International AG can provide the user of this Internet site with more user-friendly services that would not be possible without placing a cookie. The information and offerings on our Internet site can be optimised with regard to the user by using a cookie. As stated above, cookies make it possible for us to recognise users of our Internet site. The purpose of this recognition is to make it easier for users to use our Website. For example, the user of an Internet site that uses cookies does not need to input his access data each time he or she visits the Internet site because this is handled by the Internet site and the cookie that had been stored on the computer system of the user. A further example is the cookie of a shopping basket in the online shop. The online shop notes the article that the customer has placed in the virtual shopping basket via a cookie.

The person concerned can at any time prevent the placing of cookies by our Internet site by means of the corresponding setting of the Internet browser that is being used and thus object to the placing of cookies on a permanent basis. In addition, cookies that have already been placed can be deleted at any time by an Internet browser or other software programs. This is possible in all current Internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser that is being used, then under certain circumstances not all the functions of our Internet site can be used to the full extent.

4. Collection of general data and information

The Internet site of Green Wood International AG collects a series of general data and information items with each calling up of the Internet site by a person concerned. This general data and information is stored in the logfiles of the Server. What can be collected are the (1) type and version of the browser used, (2) the operating system used by the system making the access, (3) the Internet site from which an accessing system cam to our Internet site (a so-called Referrer), (4) the Web sub-pages that were addressed on our Internet site by the accessing system, (5) the data and time of an access to the Internet site, (6) an Internet-Protocol Address (IP address), (7) the Internet Service Provider of the accessing system and (8) other related data and information that serves to avert hazards in the event of attacks to our EDP systems.

Green Wood International AG cannot draw any conclusions regarding the person concerned when using this general data and information. In fact this information is required (1) to deliver the contents of our Internet site correctly, (2) to optimise the contents of our Internet site and the advertising for this, (3) to ensure the long-term functionality of our EDP systems and the technology behind our Internet site, and (4) to provide the necessary information for a prosecution to be given the prosecuting authorities in the event of a cyber-attack. This anonymously collected data and information is therefore on the one hand used for statistical purposes by Green Wood International AG and furthermore evaluated with the aim of increasing the data protection, privacy and security in our company so as to be able to provide in the last resort an optimal level of protection for the persona data that we process. The anonymous data of the Server logfile is stored separately from all personal data that had been input by the person concerned.

5. Subscription to our newsletter

Users are given the option in the Internet site of Green Wood International AG to subscribe to the newsletter of our company. Exactly which personal data is transferred to the person responsible for processing when ordering the newsletter depends on the input mask that is used for this purpose.

Green Wood International AG informs its customers and business partners at regular intervals by means of newsletter of offerings from the company. The newsletter from our company can fundamentally only be received by the person concerned if (1) the person concerned has a valid e-mail address and (2) the person concerned has registered for the newsletter. For legal reasons a confirmation e-mail is sent first of all to the person concerned to his or her e-mail address as registered as part of the Double-Opt-In procedure. This confirmation e-mail is used to check whether the owner of the e-mail address in their capacity as the person concerned has authorised the receipt of the newsletter.

When registering for the newsletter, we store in addition the IP address allocated by the Internet Service Provider (ISP) for the person concerned to the computer system used at the time of the registration and also the date and time of the registration. It is necessary to collect this data to be able to track any (possible) misuse of the e-mail address of the person concerned at a later time and is therefore used to provide legal security of the person responsible for processing.

The personal data that is collected in connection with the registration for the newsletter is solely used to send out our newsletter. In addition, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or if a registration of this kind is required, as in the case of changes to the newsletter offering or if the technical circumstances change, as the case may be. There is no further passing on of the personal data that is collected as part of the newsletter sending service. The persons concerned can terminate the subscription to the newsletter at any time. The consent for the storing of personal data that the person concerned gave us to send out the newsletter can be revoked at any time. The corresponding link to be used to revoke this consent can be found in each newsletter. In addition, at any time there is also the option to notify the person responsible for processing that you wish to cancel the sending of the newsletter directly at the Internet site or to use this to notify this fact to the person responsible for processing in another way.

6. Newsletter tracking

The newsletters of Green Wood International AG contain so-called counting pixels. A counting pixel is a miniature graphic that is embedded in e-mails that are sent in HTML form so as to permit logfile recording and analysis. As a result, it is possible to carry out a statistical evaluation of the success or failure of online marketing campaigns. Green Wood International AG can tell on the basis of the embedded counting pixel if and when an e-mail had been opened by the person concerned and which links in the e-mail had been called up by the person concerned.

Any personal data that is collected by the counting pixel included in the newsletter is saved and evaluated by the personal responsible for processing so as to optimise the sending out of the newsletter and to better match the contents of future newsletters to the interests of the person concerned. This personal data is not passed on to any third parties. The person concerned is entitled at any time to revoke the declaration of consent that he or her had given by using the separate double-opt-in procedure. After this revocation this personal data is deleted by the person responsible for processing. Terminating the sending of the newsletter shall automatically be regarded as a revocation of consent by Green Wood International AG.

7. Contact option via the Internet site

Due to the legal requirements, the Internet site of Green Wood International AG contains details that allow the rapid establishing of electronic contact to our company and to make possible direct communication with us, which likewise comprises a general e-mail (electronic mail) address. If a person concerned makes contact by e-mail or the contact form with the person responsible for processing then the personal data that had been transferred by the person concerned is stored automatically. Personal data of this type that can been transferred on a voluntary basis from a person concerned to the person responsible for processing is stored for the purposes of processing or to make contact with the persons concerned. There is no passing on of this personal data to any third parties.

8. Routine deletion and blocking of personal data

The person responsible for processing processes and stores the personal data of the person concerned only for that period that required to attain the purpose of this storage or if this has been covered by the EU legislative and regulatory bodies or other legislators in laws and regulations that the persons responsible for processing is subject to.

If the purpose of the storage no longer applies or if a storage period that had been specified by the EU legislative and regulatory bodies or other responsible legislators expires then the personal data shall be blocked or deleted as a matter of routine and in accordance with the legal stipulations.

9. Rights of the person concerned

a) Right to confirmation
Each person has the right granted to him or her by the European regulatory and legislative bodies to demand from the person responsible for processing a confirmation as to whether or not their relevant personal data has been processed. If a person concerned wishes to make use of this right of confirmation, he or she can contact at any time an employee of the person responsible for processing.

b) Right to information
Each person affected by the processing of personal data as the right granted to him or her by the European regulatory and legislative bodies to demand information at any time and at no cost from the person responsible for processing concerning the personal data that has been stored concerning his person and to have a copy of this information. In addition, the European regulatory and legislative bodies have granted to the person concerned notification of the following items of information::

the purposes of the processing
the categories of personal data that are being processed
the recipients or categories of recipients to whom the personal data has been made available or is being made available, this applies in particular to recipients in third party countries or to international organisations.
if possible, the planned duration for which the personal data will be stored, or, if that is not possible, the criteria for specifying this duration.
the existence of a right to the correction or deletion of the his or her personal data or a restriction on the processing by the responsible person or a right of objection with regard to this processing
the existence of a right to lodge a complaint to the supervisory authorities
if the personal data is not to be collected from the person concerned: all available information concerning the origin of the data
the existence of automated decision-making including checking in accordance with Article 22 paras1 and 4 of the GDPR [General Data Protection Regulation] and, at least in these cases, meaningful information on the logic involved and the range and desired effects of processing of this type for the person concerned.

Furthermore, the person concerned has a right to be informed as to whether personal data has been transferred to a third-party country or to an international organisation. If that is the case, then the person concerned has for that matter the right to receive information on suitable guarantees in connection with this transferring. If a person concerned wishes to make use of this right to information, he or she can contact at any time an employee of the person responsible for processing.

c) Right to correction
Each person concerned who is affected by the processing of personal data has the right granted to him or her by the European regulatory and legislative bodies to request immediate correction of any inaccurate personal data concerning him. In addition, the person concerned has the right, and with due regard for the purposes of the processing, to request the completion of incomplete personal data, also by means of a supplementary declaration. If a person concerned wishes to make use of this right of correction, he or she can contact at any time an employee of the person responsible for processing.

d) Right to deletion (right to be forgotten)
Each person concerned who is affected by the processing of personal data has the right granted to him or her by the European regulatory and legislative bodies to request that the personal data concerning them is to be deleted immediately if anyone one of the following reasons applies and hence processing is no longer required:

The personal data was collected for purposes or processed in some other way for which it is no longer required.
The person concerned revokes his consent on which the processing is based in accordance with Article 6 para. 1 letter a or Article 9 para. 2 letter a of the GDPR [General Data Protection Regulation] and there is no other legal basis of any kind for the processing.
The person concerned has lodged an objection against the processing within the meaning of Article 21 para. 1 of the GDPR [General Data Protection Regulation] and there are no paramount justified reasons for the processing, or the person concerned has lodged an objection against the processing in accordance with Article 21 para 2 of the GDPR.
The personal data had been processed in an unlawful way.
The deletion of the personal data is required to fulfil a legal obligation in accordance with EU law or the law of the member states that the responsible person is subject to.
The personal data had been collected in relation to offered services of the information industry in accordance with Article 8 para. 1 of the GDPR [General Data Protection Regulation].

If any one of the reasons listed above applies and a person concerned wishes to have deleted the personal data that Green Wood International AG has stored, then he or she can at any time contact an employee of the person who is responsible for processing. The employee of Green Wood International AG will arrange for the request for deletion to be implemented immediately. Id the personal data had been made publicly available by Green Wood International AG and if our company is obligated to delete the personal in its capacity as a responsible party in accordance with Article 17 para. 1 of the GDPR [General Data Protection Regulation], then Green Wood International AG shall take appropriate measures, also of a technical nature, with due regard for the available technology and the costs of implementation, to inform others who are responsible for the processing of the data that the person concerned has requested that these other persons who are responsible for data processing to delete this personal data, including all links, and also of any copies or replicas of this personal data insofar as processing is not required. The employee of Green Wood International AG will arrange to have done what is necessary in the individual case.

e) Right to restriction of processing
Each person concerned who is affected by the processing of personal data has the right granted to him or her by the European regulatory and legislative bodies to request from the person responsible for processing a restriction on processing if any one of the following preconditions applies:

The correctness of the personal data is disputed by the person concerned and for a period of time that makes it possible for the responsible person to check the accuracy of the personal data.
The processing is unlawful, the person concerned refuses to allow the deletion of the personal data and requests instead a restriction on the use of the personal data concerned.
The responsible person no longer requires the personal data for the purposes of processing, but the person concerned requires it for the establishment, exercise or defence of legal claims.
The person concerned has lodged an objection against the processing in accordance with Article 21 para. 1 of the GDPR [General Data Protection Regulation] and it is not yet certain whether the justified reasons of the responsible person outweigh those of the person concerned.

If any one of the preconditions listed above applies and a person concerned wishes to have restricted the personal data that Green Wood International AG has stored, then he or she can at any time contact an employee of the person who is responsible for processing. The employee of Green Wood International AG will arrange to have the processing restricted.

f) Right to data transferability
Each person concerned who is affected by the processing of personal data has the right granted to him or her by the European regulatory and legislative bodies to receive in a structured, current and machine-readable format the personal data concerning him or her and which the person concerned had provided to a responsible person. The person concerned has in addition the right to transfer this data to another responsible person without any hindrance by the responsible person to whom the personal data had been provided insofar as the processing is based on consent being given in accordance with Article 6 para. 1 letter a or Article 9 para. 2 letter a of the GDPR [General Data Protection Regulation] or on a contact in accordance with Article 6 para. 1 letter b of the GDPR with the aid of automated procedures unless the processing is required for the performance of a task that is in the interest of the public or was carried out while exercising official authority which had been transferred to the responsible person.

Furthermore, the person concerned has the right while exercising his or her right to data transferability in accordance with Article 20 para. 1 of the GDPR [General Data Protection Regulation] to ensure that the personal data is transferred directly from one responsible person to another responsible person insofar as this is technically feasible and insofar as the rights and freedoms of other persons are not affected. The person concerned can directly contact any employee of Green Wood International AG or another employee to exercise this right to data transferability.

g) Right to lodge an objection
Each person concerned who is affected by the processing of personal data has the right granted to him or her by the European regulatory and legislative bodies and arising out reasons derived from his or her particular situation to lodge an objection at any time against the processing of personal data that concerns him or her on the basis of Article 6 para. 1 clauses e or f of the GDPR [General Data Protection Regulation]. This also applies to any profiling that is based on these regulations. Green Wood International AG will no longer process the personal data in the event of an objection unless we can prove urgent reasons for the processing that are related to protection and which outweigh the interests, rights and freedoms of the person concerned or if the processing is necessary for the establishment, exercise or defence of legal claims.

If Green Wood International AG processes the personal data to carry out direct advertising, then the person concerned has the right at any time to lodge an objection against the processing of the personal data for the purposes of advertising of this kind. This also applies to profiling if it is in connection with direct advertising of this type. If the person concerned lodges an objection with respect to Green Wood International AG concerning processing for the purposes of direct advertising, then Green Wood International AG will not process this personal data any longer for these purposes.

In addition, the person concerned has the right, for reasons arising out of his or her own particular situation, to lodge an objection against the processing of his or her personal data that affects him or her and which is being used by Green Wood International AG for scientific or historical research purposes or for statistical purposes in accordance with Article 89 para. 1 of the GDPR [General Data Protection Regulation] unless the processing is required for the performance of a task that is in the interest of the public.

The person concerned can directly contact any employee of Green Wood International AG or another employee to exercise this right to lodge an objection. The person concerned is in addition free to exercise this right of objection in connection with the use of services of the information company and regardless of Directive 2002/58/EC through automated procedures in which technical specifications are used.

h) Automated decisions in an individual case, including profiling
Each person concerned who is affected by the processing of personal data has the right granted to him or her by the European regulatory and legislative bodies not to be subjected to a decision based exclusively to automated processing, including profiling, and which has a legal effect against him or her or considerably affects him or her in any other way unless the decision (1) is not required for the conclusion or fulfilment of a contract between the person concerned and the responsible person, or (2) is permissible on the basis of laws and regulations of the EU or the member states that the responsible person is subject to and these laws and regulations include adequate measures to preserve the rights and freedoms and the justified interests of the person in question or (3) are done with the explicit consent of the person concerned.

If the decision (1) for the conclusion or fulfilment of the contract between the person concerned and the responsible person is required or if (2) it is made with the explicit consent of the person concerned, then Green Wood International AG shall take appropriate measures to preserve the rights and freedoms and the justified interests of the person concerned, whereby as a minimum this includes the right to intervene by a person on the part of the responsible person to present his own points of view and to contest the decision. if the person concerned wishes to exercise rights relating to automated decisions, he or she can contact at any time an employee of the person responsible for processing.

i) Right to revoke consent concerning data privacy
Each person concerned who is affected by the processing of personal data has the right granted to him or her by the European regulatory and legislative bodies to revoke at any time his or her consent for the processing of personal data. If a person concerned wishes to make use of this right to revoke consent, he or she can contact at any time an employee of the person responsible for processing.

10. Data privacy stipulations concerning the use of Facebook

The person responsible for processing has integrated components from the Facebook company into this Internet site. Facebook is a social network. A social network is a social meeting point that is operated in the Internet, forming an online community, that as a rule makes it possible for its users to communicate with one another and to interact in a virtual area. A social network can serve as a platform for the exchange of opinions and experiences or make it possible for the Internet community to provide personal or company-related information. Facebook makes it possible for users of the social network to, among other things, create private profiles, to upload photos and to network friendship requests.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the person concerned lives outside the USA or Canada, then the person responsible for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Internet browser on the EDP system of the person concerned is automatically requested to download a display of the corresponding Facebook component from Facebook each time that one of the individual pages of this Internet site that is operated by the person responsible for processing and into which a Facebook component (Facebook plug-in) had been integrated is called up. An overall summary (in German) of all Facebook-plug-ins can be called up under https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical procedure, Facebook comes to have a knowledge of specifically which sub-page was visited on our Website by the person concerned. If the person concerned is logged into Facebook at the same time, Facebook recognises with each calling up of our Internet site by the person concerned and during the entire period of the relevant visit to our Internet site concretely which sub-page of our Internet site the person concerned had visited. This information is collected by the Facebook component assigned by Facebook to the relevant Facebook account of the person concerned. If the person concerned presses one of the Facebook buttons integrated into our Internet site, for example, the "Like" button, if the person concerned makes a comment, then Facebook assigns this information to the personal Facebook account of the person concerned and saves this personal data.

Facebook thus always receives the information via the Facebook component that the person concerned has visited our Internet site, and if the person concerned had been logged into Facebook at the same time as this calling up, this takes place regardless of whether or not the person concerned clicked on the Facebook component. If the person concerned does not want a transfer of information of this type to Facebook, then this transfer can be prevented by logging out of the person's Facebook account before calling up our Internet site.

The data guideline that is published by Facebook and which can be called up under https://de-de.facebook.com/about/privacy/ gives details of the collection, processing and use of personal data by Facebook. Furthermore, it explains there what settings can be made in Facebook to protect the private sphere of the person concerned. In addition, a number of applications are available that allow you to suppress a transfer of data to Facebook. Such applications can be used by the person concerned to suppress and prevent the transfer of data to Facebook.

11. Data privacy stipulations concerning the use of Google Analytics (with anonymizing function)

The person responsible for processing has integrated the Google Analytics component (with anonymizing function) into this Internet site. Google Analytics is a Web analysis service. Web analysis concerns the capturing, collection and evaluation of data on the behaviour of visitors to Internet sites. Among other things, a Web analysis service collects from which Internet site a person concerned came to an Internet site (the so-called referrer), which sub-pages of the Internet site were accessed, or how often and for how long a sub-page was viewed. A Web analysis is used primarily to optimise an Internet site and for a cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The person responsible for processing uses the addition "_gat._anonymizeIp" for Web analysis through Google Analytics. Through this addition the IP address of the Internet connection of the person concerned is truncated and anonymized by Google if the access to our Internet sites was made from a member state of the European Union or from another state that is a signatory to the treaty via the European Economic Area.

The purpose of Google Analytics is to analyse the visitor streams on our Internet site. Among other things, Google uses the collected data to evaluate the usage of our Internet site so as to be able to compile online reports for us that list the activities on our Internet sites, and also to reconcile the usage of our Internet site in connection with existing services. Google Analytics places a cookie on the computer or related system of the person concerned. Exactly what cookies are was explained above. Google makes possible an analysis of our Internet site by placing a cookie. The Internet browser on the EDP system of the person concerned is automatically requested by the relevant Google Analytics component to transfer data to Google for the purposes of online analysis at Google each time that one of the individual pages of this Internet site that is operated by the person responsible for processing and into which a Google Analytics component had been integrated is called up. As part of this technical procedure, Google comes to have a knowledge of personal data such as the IP address of the person concerned, which Google uses for, among other things, to track the origin of the visitors and clicks and to permit the calculation of commission as a result.

Personal information, such as the access time, the location from which the access was made and the frequency of the visits to our Internet site by the person concerned is stored. Each time our Internet sites are visited, this personal data, including the IP address of the Internet connection that was used by the person concerned, is sent to Google in the USA. This personal data is stored by Google in the United States of America. Under certain circumstances passes on to third parties the personal data that had been collected by this procedure.

In addition, the person concerned has the option to object to the collecting of the data that was generated by Google Analytics, to a usage of the data relating to this Internet site and the processing of this data by Google, and so to prevent it. To do this, the person concerned must download from the link https://tools.google.com/dlpage/gaoptout and install a browser add-on. This browser add-on informs Google Analytics via JavaScript that no data and information concerning visitors to Internet sites is to be passed on to Google Analytics. The installation of the browser add-on is assessed by Google as an objection. If the EDP system of the person concerned is deleted, formatted or reinstalled later, then the person concerned must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is deinstalled or deactivated by the person concerned or by another person at his authority then the is the option of a new installation or renewed activation of the browser add-on. Further information on the relevant applicable data privacy stipulations from Google can be found under https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this linkhttps://www.google.com/intl/de_de/analytics/.

12. Data privacy stipulations concerning the use of Google+

The person responsible for processing has integrated components from the Google+ interface into this Internet site. Google+ is a so-called social network. A social network is a social meeting point that is operated in the Internet, forming an online community, that as a rule makes it possible for its users to communicate with one another and to interact in a virtual area. A social network can serve as a platform for the exchange of opinions and experiences or make it possible for the Internet community to provide personal or company-related information. Google+ makes it possible for users of the social network to, among other things, create private profiles, to upload photos and to network friendship requests.

The operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The Internet browser on the EDP system of the person concerned is automatically requested by the Google+ interface to download a display of the corresponding Google+ interface from Google each time that one of the individual pages of this Internet site that is operated by the person responsible for processing and into which a Google+ interface had been integrated is called up. As part of this technical procedure, Google comes to have a knowledge of concretely which sub-page was visited on our Website by the person concerned. More detailed information on Google+ can be found under https://developers.google.com/+/.

If the person concerned is logged into Google+ at the same time, Google recognises with each calling up of our Internet site by the person concerned and during the entire period of the relevant visit to our Internet site concretely which sub-page of our Internet site the person concerned had visited. This information is collected by the Google'+ interface and assigned by Google to the relevant Google+ account of the person concerned.

If the person concerned presses one of the Google+ buttons integrated into our Internet site and thus gives a Google+1 recommendation, then Google assigns this information to the Google+ account of the person concerned and saves this personal data. Google stores the Google+1 recommendation of the person concerned and makes it publicly accessible under the relevant terms and conditions that had been accepted by the person concerned. A Google+1 recommendation given by the person concerned on this Internet site will consequently be stored and processed in other Google services with other personal data, such as the name of the Google+ account used by the person concerned and the photo that is stored in this in other Google services, such as, for example, search machine results from the Google search machine, the Google account of the person concerned or at other locations, for example, on Internet sites or in connection with advertising displays. In addition, Google is in a position to link the visit to this Internet site with other personal data saved at Google. In addition, Google records this personal information with the aim of improving or optimising various services from Google.

Google thus always receives the information via the Google+ interface that the person concerned has visited our Internet site, and if the person concerned had been logged into Google+ at the same time as this calling up, this takes place regardless of whether or not the person concerned has clicked on the Google+ interface. If the person concerned does not want a transfer of information of this type to Google, then this transfer can be prevented by logging out of the person's Google+ account before calling up our Internet site. Further information on the relevant applicable data privacy stipulations from Google can be found under https://www.google.de/intl/de/policies/privacy/. Further information from Google concerning the Google+1 interface can be found under https://developers.google.com/+/web/buttons-policy.

13. Data privacy stipulations concerning the use of Google Remarketing

The person responsible for processing has integrated services from Google Remarketing into this Internet site. Google Remarketing is a function of Google-AdWords that makes it possible for a company to display advertising to such Internet users who had previously been on the Internet site of the company. The integration of Google Remarketing allows a company to create user-related advertising and as a result to display to the Internet user advertising that is relevant to his or her interests. The operating company of Google Remarketing is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google Remarketing is to display advertising that is relevant to the interests of the user. Google Remarketing makes it possible to display advertisements via the Google advertising network or on other Internet sites that have been matched to the individual needs and interests of Internet users.

Google Remarketing places a cookie on the computer or related system of the person concerned. Exactly what cookies are was explained above. Placing the cookies makes it possible for Google to recognise the visitor to our Internet site if he or she calls up Internet sites that are likewise a member of the Google advertising network. The Internet browser automatically identifies to Google the person concerned with calling up of an Internet site on which the Google Remarketing service had been integrated. In the course of this technical procedure Google comes to know of personal data such as the IP address or the surfing behaviour of the user which Google uses, among other things, to display advertising that is relevant to the person's interests.

Personal data, for example, the Internet sites that had been visited by the person concerned, is stored by means of the cookie. Each time our Internet sites are visited, this personal data, including the IP address of the Internet connection that was used by the person concerned, is sent to Google in the USA. This personal data is stored by Google in the United States of America. Under certain circumstances passes on to third parties the personal data that had been collected by this procedure.

The person concerned can at any time prevent the placing of cookies by our Internet site by means of the corresponding setting of the Internet browser that is being used and thus object to the placing of cookies on a permanent basis. A setting of this kind in the Internet browser that is used would also prevent Google from placing a cookie on the computer or other system of the person concerned. In addition, a cookie that had been placed by Google Analytics can be deleted by the Internet browser or other software programs. Furthermore, the person concerned has the option to object to receiving interest-related advertising from Google. To do this, the person concerned must call up from each Internet browser that he or she uses the following link www.google.de/settings/ads and there make the desired settings. Further information on the relevant applicable data privacy stipulations from Google can be found under https://www.google.de/intl/de/policies/privacy/.

14. Use of Google Web Fonts

This site uses so-called Web Fonts that are provided by Google to provide a uniform display of the fonts. When a site is called up, your browser loads the required Web Fonts into your browser cache so as the display text and fonts correctly. The browser that you are using must make a connection to the Google Servers for this purpose. As a result, Google gets to know from your IP address that our Website had been called up. The use of Google Web Fonts is done in the interests of having a uniform and attractive display of our online offerings. This represents a justified interest within the meaning of Article 6 para. 1 lit of the German DSGVO [General Data Protection Regulation]. If your browser does not support Web Fonts, a default font will be used by your computer. You can find further information on Google Web Fonts under https://developers.google.com/fonts/faq and in the data privacy declaration from Google: https://www.google.com/policies/privacy/.

15. Data privacy stipulations concerning the use of Google AdWords

The person responsible for processing has integrated services from Google AdWords into this Internet site. Google AdWords is a service for Internet advertising that allows the advertiser to inserts adverts into the search machine results from Google and also in the Google advertising network. Google AdWords makes it possible for an advertiser to defined previously specified keywords through which an advertisement will only be shown in the search machine results from Google if the user calls up the search machine with a keyword that is relevant for the search result. In the Google advertising network the advertisements are distributed onto topic-relevant Internet sites by means of an automatic algorithm and with regard to the previously specified keywords. The operating company of Google AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google AdWords is to advertise our Internet site by displaying advertising that is relevant to people's interests on the Internet sites of third-party companies and in the search machine results from the Google search machine and to display third-party advertising on our Internet site.

If a person concerned comes onto our Internet site via a Google advertisement then a so-called conversion cookie will be placed by Google on the EDP system of the person concerned. Exactly what cookies are was explained above. A conversion cookie loses its validity after thirty days and is not used for the identification of the person concerned. If the conversion cookie has not expired, it is possible to track through this cookie whether certain sub-pages, such as, for example, the shopping basket of an online shop system were called up on our Internet site. Both we and Google can track through the conversion cookie where a person concerned who came onto our Internet site through an AdWords advertisement generated any sales, meaning that a goods purchase transaction was completed or cancelled.

The information that is collected by the use of the conversion cookie is used by Google to create visit statistics for our Internet site. These visit statistics are used by us in turn to determine the total number of users who were brought to us by AdWords advertisements, and hence on the success or failure of the relevant AdWords advertisement and to optimise our AdWords advertisements for the future. Neither our company nor other advertising customers of Google AdWords are given information from Google by which the person concerned could be identified.

Personal data, for example, the Internet sites that had been visited by the person concerned, is stored by means of the conversion cookie. Each time our Internet sites are visited, this personal data, including the IP address of the Internet connection that was used by the person concerned, is sent to Google in the USA. This personal data is stored by Google in the United States of America. Under certain circumstances passes on to third parties the personal data that had been collected by this procedure.

Furthermore, the person concerned has the option to object to receiving interest-related advertising from Google. To do this, the person concerned must call up from each Internet browser that he or she uses the following link www.google.de/settings/ads and there make the desired settings. Further information on the relevant applicable data privacy stipulations from Google can be found under https://www.google.de/intl/de/policies/privacy/.

16. Data privacy stipulations concerning the use of YouTube

The person responsible for processing has integrated components from YouTube into this Internet site. YouTube is an Internet video portal that makes it possible for video publishers to put up video clips at no charge and for other users to likewise view, evaluate and comment on them, likewise at no charge. YouTube permits the publication of all types of videos, so as a result both complete films and TV broadcasts as well as music videos, trailers or videos made by users can be called up via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is an affiliate of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The Internet browser on the EDP system of the person concerned is automatically requested to download a display of the corresponding YouTube component from YouTube each time that one of the individual pages of this Internet site that is operated by the person responsible for processing and into which a YouTube component (YouTube video) had been integrated is called up. Further information on YouTube can be found under https://www.youtube.com/yt/about/de/. As part of this technical procedure, YouTube and Google come to have a knowledge of concretely which sub-page was visited on our Internet site by the person concerned.

If the person concerned is logged into YouTube at the same time, YouTube detects with the call to a sub-page that contains a YouTube video which specific sub-page of our Internet site had been visited by the person concerned. This information is collected by the- YouTube and Google and is assigned to the relevant YouTube account of the person concerned.

YouTube and Google thus always receive the information that the person concerned has visited our Internet site, and if the person concerned had been logged into YouTube at the same time as this calling up, this takes place regardless of whether or not the person concerned has clicked on a YouTube video. If the person concerned does not want a transfer of information of this type to YouTube and Google, then this transfer can be prevented by logging out of the person's YouTube account before calling up our Internet site. The data privacy stipulations that are published by YouTube and which can be called up under https://www.google.de/intl/de/policies/privacy/ give details of the collection, processing and use of personal data by YouTube and Google.

17. Legal basis of the processing

Article 6 I lit. a of the GDPR [General Data Protection Regulation] serves our company as the legal basis for processing operations in which we obtain a statement of consent for a particular processing purpose. If the processing of personal data is required to fulfil a contract whose contractual party is the person concerned, as for example is the case with processing operations that are necessary for the delivery of the good or to provide some other service or counterpart service, then the processing is based on Article 6 I lit. b of the GDPR [General Data Protection Regulation]. The same applies to any processing operations that are required to carry precontractual measures, as in cases regarding inquiries about our products or services. If our company is subject to a legal obligation that makes the processing of personal data necessary, as for example the fulfilment of tax obligations, then the processing is based on Article 6 I lit. c of the GDPR [General Data Protection Regulation]. In rare cases the processing of personal data could be required to protect vitally important interests of the person concerned or of another natural person. For example, that could be the case if a visitor to our operations was injured and his name, his age, his social and health insurance data or other important information that could affect his or her life would have to be given to a doctor, a hospital or other third party. Then the processing would be based on Article 6 I lit. d of the German Data Privacy Law. In the last resort, processing operations could be based on Article 6 I lit. d of the German Data Privacy Law. Processing operations that are not covered by any of the legal situations listed above are based on this legal situation if the processing is required to preserve a justified interest of our company or of a third party as long as the interests, basic rights and basic freedoms of the person concerned are not affected. Such processing operations are therefore permitted by us in particular because they are listed especially by the European legislators. It represents in this sense the option that a justified interest could be assumed if the person concerned is a customer of the responsible person (recital 47 clause 2 of the GDPR [General Data Protection Regulation]).

18. Justified interests in processing that could be followed up by the responsible person or a third party.

Based on the processing of personal data in Article 6 I lit. f of the GDPR [General Data Protection Regulation], it is our justified interest to carry out our business activities with a view to improving the wellbeing of our employees and our shareholders.

19. Length of time for which personal data can be stored

The criterion for the duration of the storage of personal data is the relevant applicable retention period. Once this period has expired, then the corresponding data is deleted routinely unless it is still required to fulfil or initiate the contract.

20. Legal or contractual stipulations concerning the provision of personal data; necessity for concluding a contract; obligation of the person concerned to provide personal data; possible consequences of failure to provide this data

We hereby clarify that the provision of personal data can to some extent be required by law (e.g. tax regulations) or also due to contractual rulings (e.g. details of the contractual partner). Sometimes it can be necessary in order to conclude a contract that a person concerned makes available personal data that consequently must be processed by us. For example, the person required is required to provide personal data if our company concludes a contract with him or her. Failure to provide the personal data can have the result that the contract with the person concerned cannot be concluded. The person concerned must contact one of our employees before the person concerned provides personal data. Our employee clarifies for the person concerned for the individual case whether the provision of the personal data has been legally or contractually stipulated or is required to conclude the contract, whether there is an obligation to provide the personal data, and what consequences a failure to provide the personal data would have.

21. Existence of automated decision making

As a company that is aware of its own responsibility, we do not make use of any automatic decision making or profiling.

This data privacy declaration was created using the data privacy and protection generation of the DGD, the Deutsche Gesellschaft für Datenschutz GmbH, which acts as an an external data privacy consultant in Berlin in cooperation with the Cologne-based IT and data privacy lawyer Christian Solmecke.