Data protection notice

Introduction and general information

Thank you for your interest in our website. The protection of your personal data is very important to us. Below you will find information on the handling of your data that is collected through your use of our website. Your data will be processed in accordance with the statutory data protection regulations.

You are under no legal or contractual obligation to disclose personal data. However, as a small amount of this data is required for the provision of the website itself, you will not be able to use the website if you refuse to provide it. No automated decision-making takes place on the website.

Controller within the meaning of the GDPR

Grunwald GmbH & Co. KG
Neubruchstraße 4
85774 Unterföhring
it-service@agenturgrunwald.de
089 950907 500

Contact details of the data protection officer

Wolfgang Evers
datenschutz@agenturgrunwald.de

Contact details of the information security officer

Jörg Maiwald
IQManagement Maiwald
An der Petruskirche 19
06120 Halle (Saale)
datenschutz@agenturgrunwald.de

Definition of terms

Our privacy policy should be simple and understandable for everyone. As a rule, the official terms of the General Data Protection Regulation (GDPR) are used in this privacy policy. The official definitions are explained in Art. 4 GDPR.

Server log files

When you visit our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status
• Web browser and operating system used
• (Full) IP address of the requesting computer
• Amount of data transferred

We collect and process the data listed on the basis of our legitimate interest in ensuring a smooth connection to the website and enabling users to use our website conveniently. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR (protection of legitimate interests).

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. It is not possible for us to draw conclusions about individual persons based on this data. After 7 days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user.

Cookies

Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted when you close your browser. Other cookies remain stored on your end device until you delete them or the storage period expires.

Our website uses cookies for various purposes. On the one hand, we set technically or otherwise absolutely necessary cookies (hereinafter also referred to as technically necessary or essential), which are stored by the browser on your device and which contain certain settings for the use of the website (e.g. for the current session). Such cookies serve to make our website more user-friendly, effective and secure. In some cases, these cookies are used to simplify website processes by storing settings (e.g. keeping options that have already been selected available). If personal data is also processed by technically necessary or essential cookies implemented by us, the storage is carried out in accordance with Section 25 (2) No. 2 TTDSG and further processing in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in providing the website for customer communication, including the functionality requested by the user, as well as a customer-friendly and effective design of the page visit.

We also use functional cookies on our website as well as cookies for analysis and marketing purposes. These cookies are only set if you have given us your consent to do so. The legal basis for processing in this respect is Section 25 (1) TTDSG in conjunction with Art. 6 (1) (a) GDPR. The specific cookies are described in detail below.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. The cookie settings can be managed for the respective browsers under the following links.

Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Internet Explorer: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Microsoft Edge: https://support.microsoft.com/de-de/topic/cookies-in-microsoft-edge-anzeigen
Safari: https://support.apple.com/de-de/guide/safari/ibrw850f6c51/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
You can also individually manage the cookies of many companies and functions that are used for advertising. To do this, use the relevant user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices
Most browsers also offer a so-called „do-not-track function“, with which you can indicate that you do not wish to be „tracked“ by websites. When this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be tracked for the purpose of behavior-based advertising and the like. For information and instructions on how to edit this function, please refer to the following links, depending on your browser provider:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/
Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/weitere-informationen-zur-tracking-verhinderung-in-microsoft-edge
Safari: https://support.apple.com/de-de/guide/safari/sfri40732/16.1/mac/13.0
Opera: http://help.opera.com/Windows/12.10/de/notrack.html

You can also prevent scripts from loading by default. NoScript only allows the execution of JavaScripts, Java and other plug-ins on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that the functionality of this website may be restricted if cookies are deactivated.

Essential

Essential cookies enable basic functions and are necessary for the proper functioning of the website.

Borlabs Cookie

• Name: Borlabs Cookie
• Provider: Owner of this website, disclaimer
• Purpose: Saves the settings of the visitors selected in the Cookie Box of Borlabs Cookie.
• Cookie Name: borlabs-cookie
• Cookie runtime: 1 year

Statistics

Statistics cookies collect information anonymously. This information helps us to understand how our visitors use our website.

Google Analytics

• Name: Google Analytics
• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Cookie from Google for website analysis. Generates statistical data on how visitors use the website.
• Privacy policy: https://policies.google.com/privacy?hl=de
• Cookie Name: _ga,_gat,_gid
• Cookie runtime: 2 months

Google Tag Manager

• Name: Google Tag Manager
• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Cookie from Google to control advanced script and event handling.
• Privacy policy: https://policies.google.com/privacy?hl=de
• Cookie Name: _ga,_gat,_gid
• Cookie runtime: 2 years

Marketing

Marketing cookies are used by third-party providers or publishers to display personalised advertising. They do this by tracking visitors across websites.

Google Ads

• Name: Google Ads
• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Purpose: Cookie from Google that is used for Google Ads conversion tracking.
• Privacy policy: https://policies.google.com/privacy?hl=de

External media

Content from video platforms and social media platforms is blocked by default. If cookies from external media are accepted, access to this content no longer requires manual consent.

The website uses the following technically necessary cookies:

The website uses the following marketing cookies:

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. („Google“). Google Analytics uses so-called cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, whereby a personal reference can be excluded. We have concluded the standard contractual clauses with Google.

We only use Google Analytics for the purpose of website analysis if you have given your consent in accordance with Section 25 (1) GDPR in conjunction with Art. 6 (1) sentence 1 lit. a GDPR.

Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The terms of use of Google Analytics and information on data protection can be accessed via the following links: https://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the URL https://tools.google.com/dlpage/gaoptout?hl=de.

You can activate or deactivate the collection by Google Analytics using the following button:

Information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Details on how Google Analytics handles user data can be found in Google’s privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have concluded an order processing contract with Google in order to fully comply with the statutory data protection requirements.

Demographic characteristics in Google Analytics

Our website uses the „demographic characteristics“ function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section „Objection to data collection“.

Google Analytics Remarketing/DoubleClick

Our website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Remarketing is to display interest-based advertising. Google Remarketing enables us to display advertisements via the Google advertising network or on other websites that are tailored to the individual needs and interests of Internet users.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you sign in with your Google account.

To support this feature, Google Analytics collects authenticated user IDs that are temporarily linked to our Google Analytics data to define and create audiences for cross-device advertising.

You can permanently opt-out of cross-device remarketing/targeting by turning off personalized advertising in your Google Account by following this link: https://adssettings.google.com/

The summary of the data collected in your Google account is based exclusively on your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR). The information collected about users may be transmitted to Google and stored on Google’s servers in the USA. Google is certified for the US-European data protection agreement „Privacy Shield“, which guarantees compliance with the level of data protection applicable in the EU. Further information and the data protection provisions can be found in Google’s privacy policy at: https://www.google.com/policies/technologies/ads/

Google Tag Manager

This website uses Google Tag Manager, a cookie-free domain that does not collect any personal data.

This tool allows „website tags“ (i.e. keywords that are integrated into HTML elements) to be implemented and managed via an interface. By using Google Tag Manager, we can automatically track which button, link or personalized image you have actively clicked on and can then record which content on our website is of particular interest to you.

The tool also triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have deactivated it at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

The use of Google Tag Manager is in the interest of a comfortable and easy use of our website. The legal basis is your consent in accordance with Art. 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a) GDPR.

Contact form and contact by e-mail

If you send us inquiries via the contact form or e-mail, your details from the inquiry form or your e-mail, including the first name, surname and title you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. You are required to provide an e-mail address to contact us; providing your name and telephone number is voluntary. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary. In the case of Art. 6 para. 1 lit. f GDPR, you can object to the processing of your personal data at any time.

Social media presences

We operate our own presences on the social networks Facebook, LinkedIn and Xing. These networks process your personal data, for example, to create user profiles based on your interests. Cookies may be stored on your device for this purpose. You can find more detailed information on data processing by the individual networks in the respective data protection information and, where applicable, in the networks‘ cookie policies:

https://de.linkedin.com/legal/privacy-policy

https://privacy.xing.com/de

This data protection information also contains information about the type and scope of data processing by the respective networks as well as the options for asserting your rights as a data subject (right to information, confirmation, correction, deletion, restriction, data portability and complaint to the responsible data protection supervisory authority).

We do not know what user data the social networks collect. We do not have full access to the collected user data or user profiles. We can only access public profile information. What information you make publicly available can be customized through your account settings.

If available, we use user data from the chat functions to answer your questions. The collected customer data is used to contact the user to provide the requested information and offers.

We may receive anonymous statistics from the social networks based on the legitimate interest in the use of our site, such as

• Followers: Number of people who follow us – including growth and development over a defined period of time.
• Reach: Number of people who see a specific post. Number of interactions on a post. This allows you to deduce, for example, which content in the community is better than others.
• Advertising performance: How many people have seen and interacted with an ad or article?
• Demographics: Average age of visitors, gender, place of residence, language, industry.

These statistics are used to constantly improve our online content and to better respond to the interests of our users. We cannot link the statistical data to the profiles of our fans or individual users. You can use your social network account settings to decide how you want to display targeted advertising.

Special notes LinkedIn

We are jointly responsible with LinkedIn for the operation of our LinkedIn company page in terms of data protection law.

The controller for LinkedIn in Europe is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The joint responsibility is regulated in the LinkedIn Page Insights Joint Controller Addendum:

https://legal.linkedin.com/pages-joint-controller-addendum

Data processing outside of Europe by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA is possible under certain circumstances.

The legal basis for the processing of your personal data on our social media presence is the legitimate interests of us and the respective platforms pursuant to Art. 6 para. 1 f) GDPR in advertising, recommendations and measurements as well as in offering interested parties an information and communication channel. You can object to data processing at any time. To do so, please contact the respective platform. In your browser settings, you can also prevent the storage of cookies or delete existing cookies at any time.

Data transfer and recipients

Your personal data will not be transferred to third parties unless

• if we have explicitly indicated this in the description of the respective data processing
• if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and
• insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

We also use external service providers for the processing of our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. If necessary, we have concluded order processing contracts with them in accordance with Art. 28 GDPR. These are service providers for web hosting, sending e-mails and maintaining and servicing our IT systems, etc. The service providers will not pass this data on to third parties.

Data security

We take appropriate technical and organizational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

Duration of storage of personal data

The duration of the storage of personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for contract fulfillment or contract initiation or if we have a legitimate interest in further storage, the data will be deleted if it is no longer required for these purposes or if you exercise your right of revocation or objection.

Your rights

Below you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

The right, in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us.

The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you dispute the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR

The right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller in accordance with Art. 20 GDPR

The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.

The right to withdraw consent granted in accordance with Art. 7 (3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;

Right of objection

If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.

If you would like to exercise your right of cancellation or objection, simply send an e-mail to datenschutz@agenturgrunwald.de.

External links

Social networks (Twitter and Xing) are only integrated on our website as links to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been forwarded. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you use.

Subject to change

We reserve the right to amend or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The latest version applies to your visit.

Date of this privacy policy: 13.01.2023