Data protection social media

Our social media appearances

Data processing through social networks

We maintain publicly available profiles in social networks. The individual social networks we use can be found below.

Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g., like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.

Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal basis

Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g., Facebook).

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Storage time

The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.

We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g., in their privacy policy, see below).

Individual social networks

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries.

You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

For details on how they handle your personal information, see the Instagram Privacy Policy: https://help.instagram.com/519522125107875.

LinkedIn

We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy?hl=en.

Privacy Policy

We appreciate your visiting our website. The protection and security of your data is of utmost importance for us. Our processes are thus organized, so that only a minimum of Personal Data will collected or processed. The following Privacy Statement explains, which information we collect during your visit of our website and which part of the information will possibly be used and which way.

1. Name and address of Controller

Controller within the meaning of the General Data Protection Regulation (GDPR) and of other national data protection laws of the member states as well as of other data protection regulations is the:

Pickhardt & Gerlach GmbH & Co. KG
Industriestraße 42
57413 Finnentrop

Telephone: +49 2721 9577-0
Telefax:  +49 2721 9577-19
E-Mail: info@pgwpgw.de

Management:
Dipl.-Ing Rainer Theile
Dr. Paul Braun

2. Name and address of Data Protection Officer

The Data Protection Officer of the Controller is:

Martin Wagner, LL.M.
Lawyer and Master of Laws
Certified Data Protection Officer (TÜV Nord)
Katternberger Str. 24
42655 Solingen
Phone: +49 212 52088590
E-Mail: pgw@datenschutzservice.online

3. General information on data processing

3.1. Scope and processing of Personal Data

We generally collect and use Personal Data of our users only, insofar as this is required to provide a functioning website as well as our contents and services. The collection and use of Personal Data of our users will generally only be carried out upon the consent of the user. An exception exists in those cases, in which the previous obtaining of a consent will not be possible for practical reasons and if the processing is allowed by statutory regulations.

Legal basis for the processing of Personal Data

Insofar as we obtain the consent of the data subject for the processing procedures of Personal Data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) will be the legal basis for the processing of Personal Data.
Art. 6 para. 1 lit. b GDPR is the legal basis for the processing of Personal Data required for the fulfilment of a contract, to which the data subject is a contractual party. This also applies to processing activities, which are required for the performance of pre-contractual measures.
Insofar as a processing of Personal Data is required to fulfil a legal obligation, Art. 6 para. 1 lit. c GDPR is the legal basis.
Art. 6 para. 1 lit. d GDPR is used as the legal basis in case vital interests of the data subject or of another natural person will require a processing of Personal Data. If the processing will be required to maintain a justified interest of our company or of a third party and if the interests, the fundamental rights and freedoms of the data subject do not exceed the first-mentioned interest, Art. 6 para. 1 lit. f GDPR will be the legal basis for the processing.

3.3. Data erasure and duration of storage

The Personal Data of the data subjects will be erased or blocked as soon as the purpose for the storage will lapse. A storage may also be carried out, if this is provided for through European or national legislation in EU ordinances, laws or other regulations, to which the controller is subjected. A blocking or erasure of data will also be carried out, if a storage period stipulated through the above standards will expire, unless the continued storage of such data will be required for a conclusion or a fulfilment of a contract.

Provision of the website and preparation of logfiles

Description and scope of data processing

Any time our website is called, our system will automatically collect data and information from the computer system of the computer calling.
At this stage, the following data will be collected:

  • Information on browser type and version used
  • The operating system of the user
  • The internet service provider of the user
  • The IP address of the user
  • Date and time of the access
  • Websites, from which the system of the user has access to our website
  • Websites, which are called by the system of the user via our website

The logfiles contain IP addresses or other data enabling the assignment to a user. This could be possible, for example, if the link to the website, from which the user navigates to the website, or the link to the website, to which the user changes, contains Personal Data. The data will also be stored in the logfiles of our system. A storage of these data, together with other Personal Data will not be made.

4.2 Legal basis for the data processing

The legal basis for the temporary storage of the data and of the logfiles is Art. 6 para. 1 lit. f GDPR.

4.3. Purpose of the data processing

The temporary storage of the IP address through the system is necessary to enable a delivery of the website to the computer of the user. For this purpose, the IP address of the user must be stored for the time of the session. The storage in logfiles is used to ensure the functionality of the website. In addition, we use these data to optimize the website and to ensure the security of our information technology systems. An analysis of the data for marketing purposes will not be made in this connection. These purposes are deemed as our legitimate interests in the data processing according to Art. 6 para. 1 lit. f GDPR.

4.4. Duration of the storage

The data will be deleted as soon as these will not be required anymore to achieve the purpose of their collection. In the case of the collection of the data to provide the website, this is the case at the time the relevant session is terminated. In the case of the storage of the data in the logfiles, this will be done at the latest after seven days. A storage of the data exceeding this time limit is possible. In this case, the IP addresses of the users will be deleted or anonymized, so that an assignment to the client calling will not be possible anymore.

4.5. Options for objection and elimination

The collection of the data to provide the website and the storage of the data in logfiles is compulsory for the operation of the website. Thus, the user will not have the option for objection.

5. Use of cookies

5.1. Description and scope of data processing

Our website uses cookies. Cookies are text files, which are stored in the internet browser or by the internet browser on the computer system of the user. If a user calls a website, a cookie may be stored in the operating system of the user. This cookie contains a characteristic string allowing an unambiguous identification by the browser when calling the website again.

We use cookies to organize our website user-friendly. Some elements of our website require, that the calling browser may also be identified after a change of pages/sites.

In this context, the following data will be stored in the cookies and transferred:

  • Language settings

5.2. Legal basis for the data processing

The legal basis for the data processing of Personal Data using cookies is Art. 6 para. 1 lit. f GDPR.

5.3. Purpose of the data processing

The purpose of the use of technically required cookies is to simplify the use of websites for the user. Some functions of our website cannot be offered without the use of cookies. It is necessary in this case, that the browser will be recognized again even after a change of the page/site.

We use cookies for the following applications:

  • To take over language settings

The user data collected through technically required cookies will not be used to generate user profiles. These purposes represent our legitimate interests in the processing of Personal Data according to Art. 6 para. 1 lit. f GDPR.

5.4. Duration of storage, option for objection and elimination

Cookies are stored on the computer of the user and transferred by the cookies to our website. Thus, you have the full control as a user of the use of the cookies. You can change the settings in your internet browser to deactivate or restrict the transfer of cookies. Any cookies already stored can be deleted at any time. This may also be done automatically. If cookies will be deactivated for our website, it is possible that not all of the functions of the website can be completely used anymore.

6. Email contact

6.1. Description and scope of data processing

A contact is possible via the email address provided. In this case, the Personal Data of the user transferred together with the email will be stored. No transfer of the data to third parties will be carried out in this case. The data will be exclusively used for the processing of conversation.

6.2. Legal basis for the data processing

Legal basis for the data processing, which are transferred in the course of the submission of an email, is Art. 6 para. 1 lit. f GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for the data processing is Art. 6 para. 1 lit. b GDPR.

6.3. Purpose of the data processing

The processing of the Personal Data is exclusively carried out to process the contacting. This is the required legitimate interest in the processing of the data. The other Personal Data processed during the dispatching process are used to prevent a misuse of the contact form and to safeguard the security of our information technology systems.

6.4. Duration of storage

The data will be deleted as soon as these are not required anymore to achieve des purpose of their collection. This is the case as soon as the relevant conversation with the user has been terminated. The conversation is terminated, if the respective circumstances indicate that the relevant subject matter has been finally clarified.

6.5. Option for objection and elimination

The user will have the option at any time to revoke the consent to the processing of Personal Data. If the user will contact us by email, the user may object to the storage of the Personal Data at any time. In such a case, it will not be possible to continue the conversation. In this case, any and all Personal Data stored in the course of the contacting will be deleted.

7. Rights of data subject

If Personal Data of you will be processed, you will be the data subject within the meaning of the GDPR and you will have the following rights towards the controller:

7.1. Right of information

You are entitled to request from the controller a confirmation, whether or not Personal Data referring to you are processed by us.

In case of such a processing, you may request the following information from the controller:

  1. the purposes, for which the Personal Data are processed;
  2. the categories of Personal Data, which are processed;
  3. the recipients or categories of recipients to whom the Personal Data referring to you have been disclosed or will still be disclosed;
  4. the envisaged period of storage of the Personal Data referring to you or, if no concrete data on this are available, the criteria for the definition of the period of storage;
  5. the existence of the right to request from the controller the rectification or erasure of the Personal Data referring to you, of the right for the restriction of the processing through the controller or of the right to object to such processing;
  6. the existence of the right to lodge a complaint with a supervisory authority;
  7. all available information on the origin of the data, if the Personal Data are not collected from the data subject:
  8. the existence of automated decision-making, including profiling, referred to in Article 22, para. 2 and 4 GDPR and - at least in those cases - meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You will have the right to request information, whether the Personal Data referring to you will be transferred to a third country or to an international organization. You may request in this connection to be informed about the suitable guarantees pursuant to Art. 46 GDPR in connection with the transfer.

7.2. Right to correction

You will have a right to correction and/or completing towards the controller, insofar as the processed Personal Data referring to you are incorrect or incomplete. The controller is obliged to immediately make the correction.

7.3. Right to restriction of processing

You will have the right to request from the controller the restriction of processing of the Personal Data referring to you under the following conditions:

  1. if you will contest the accuracy of the Personal Data referring for a period enabling the controller to verify the accuracy of the Personal Data;
  2. if the processing is unlawful and if you will oppose to the erasure of the Personal Data referring to you and if you will request the restriction of the use of the Personal Data referring to you instead;
  3. if the controller no longer needs the Personal Data for the purpose of processing, but they are required by you for the establishment, exercise or defence of legal claims; or
  4. if you have objected to processing pursuant to Art. 21, para. 1 GDPR pending the verification whether the legitimate reasons of the controller override those of you.

Where processing of the Personal Data referring to you has been restricted, these data shall, with the exception of their storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural person or legal person or for reasons of important public interest of the Union or of a Member State. If the processing has been restricted under the above conditions, you will be informed by the controller before the restriction will be abolished.

7.4. Right to erasure

a) Obligation for erasure

You will have the right to request from the controller that the Personal Data referring to you shall be erased immediately, and the controller is obliged to immediately erase such data, where one of the following grounds applies:

  1. The Personal Data referring to you are no longer necessary in relation to the purpose for which they were collected or otherwise processed.
  2. You withdraw your consent on which the processing is based according to Art. 6, para. 1, lit. a or Art. 9, para. 2, lit a GDPR and where there is no other legal ground for the processing.
  3. You object to the processing according to Art. 9, para. 2 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing according to Art. 21, para. 2 GDPR.
  4. The Personal Data referring to you have been processed unlawfully.
  5. The Personal Data referring to you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subjected.
  6. The Personal Data referring to you had been collected in relation to the offer of information society services referred to in Art. 8, para. 1 GDPR.

b) Information to third parties

Where the controller has made the Personal Data referring to you public and is obliged pursuant to Art. 19, para. 1 GDPR to erase such data, the controller shall take reasonable steps, including technical measures, to inform controller which are processing the Personal Data, that you have requested the erasure by such controllers of any links to, or copy or replication of those Personal Data.

c) Exceptions

The right for erasure does not exist to the extent that processing is necessary:

  1. for exercising the right of freedom of expression and information;
  2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subjected or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the area of public health in accordance with Art. 9, para. 2, lit. h and i as well as Art. 9, para. 3 GDPR.
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89, para. 1 GDPR insofar as the right referred to in subpara. a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  5. for the establishment, exercise and defense of legal claims.

7.5. Right of information

If you have enforced the right to correction, erasure or restriction of processing towards the controller, the controller will be obliged to inform all recipients, to which the Personal Data referring to you have been disclosed, about this correction or erasure of the data or about the restriction of processing of data, unless this proves impossible or involves an inadequate expenditure.
You are entitled towards the controller to be informed about these recipients.

7.6. Right to data portability

You will have the right to receive the Personal Data referring to you, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you will have the right to transmit those data to another controller without hindrance from the controller, to which the Personal Data have been provided, where:

  1. the processing is based on consent pursuant to Art. 6, para. 1, lit. a GDPR or Art. 9, para. 2, lit. a GDPR or on a contract pursuant to Art. 6, para. 1, lit. b GDPR, or
  2. the processing is carried out by automated means.

In exercising your right to data portability you will have the right to have the Personal Data referring to you transmitted directly from one controller to another where technically feasible. Freedoms and rights of other persons shall not be affected through this.
The right to data portability shall not be applicable for a processing of Personal Data, which are required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object

You will have the right to object on grounds relating to your particular situation at any time to processing of Personal Data referring to you, which is effected pursuant to Art. 6, para. 1, lit. e or f GDPR, including profiling based on those provisions.
The controller shall no longer process the Personal Data referring to you, unless the controller demonstrated compelling legitimate grounds for the processing which override the interests, rights and freedoms of you or for the establishment, exercise or defence of a legal claim.
Where Personal Data referring to you are processed for direct marketing purposes, you will have the right to object at any time to processing of Personal Data referring to you for such marketing, which included profiling to the extent that is related to such marketing.
Where you will objet to processing for direct marketing purposes, the Personal Data referring to you shall no longer be processed for such purpose. In the context of the use of information society services, and notwithstanding Directive 2002/58/EU, you may exercise your right to object by automated means using technical specifications.

Right to revoke data protection consent

You will have the right to revoke your data protection consent at any time. When revoking the consent, the legality of the processing carried out until the time of your revocation will not be affected.

Automated individual decision-making, including profiling

You will have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision:

  1. is necessary for entering into, or performance of, a contract between you and the controller,
  2. is authorized by Union or Member State law, to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms as well as your legitimate interests, or
  3. is based on your express consent.

These decisions, however, shall not be based on specific categories of Personal Data pursuant to Art. 9, para. 1 GDPR, unless Art. 9, para. 2, lit. a or g will be applicable and adequate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With respect to the cases mentioned in (1) and (3), the controller will take adequate measures to protect the rights and freedoms as well as your legitimate interests, which includes, as a minimum requirement, the right to enforce the intervention of a person from the side of the controller, namely to present the own point of view and to object to the decision.

7.10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you will have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of Personal Data referring to you infringes the GDPR. The supervisory authority, with which the complaint is lodged, shall inform the claimant about the situation and the results of the complaint, including the option of a judicial remedy pursuant to Art. 78 GDPR.

8. Integration of Google Maps

This website uses Google Maps. This way, we can show to you interactive maps directly on the website and enable the comfortable use of the map function.

Through using our website, Google will get the information that you have called the respective sub-page of our website. In addition, the data stated under 4.1 of this statement are transmitted. This will happen irrespective of whether Google makes available a user account via which you are logged in or whether no user account exists. When you are logged in with Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you have to log out before activating the buttons. Google will store your data as use profiles and will use them for the purposes of advertising, market research and/or needs-based design of its website. Such an analysis will be particularly performed (even for users not logged in) to render needs-based advertising and to inform other users of the social network about your activities on our website. You have the right for objection against the generation of a user profile; the right has to be exercised towards Google.

Further information on the purpose and scope of the collection of data and of their processing through the plug-in provider are provided to you in the privacy statements of the providers. These will also supply to you information about your respective rights and setting options for the protection of your privacy: http://google.de/intl/de/plocies/privacy. Google will process your Personal Data also inn the US and Google has submitted itself to the EU-US Privacy Shield: https://www.privacyshield.gov./EU-US-Framework.

9. Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.

The storage of Google Analytics cookies and the utilization of this analysis tool are based on Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities.

IP anonymization

On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in

You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent. Moreover, you have the option prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to the recording of data

You have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google Analytics deactivation.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

Archiving period

Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: https://support.google.com/analytics/answer/7667196?hl=en