Data Protection

Privacy Policy according to the EU General Data Protection Regulation

Data Protection Officer:

Käppler & Pausch GmbH
c/o TÜV SÜD Akademie GmbH
Westendstraße 160
80339 Munich

Email: datenschutz@kaeppler-pausch.de

Privacy Policy according to the EU General Data Protection Regulation

In addition to these website-specific privacy notices, the privacy statements according to the EU General Data Protection Regulation also apply.

Data Protection / Principles / Purpose Specification / Security

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. We want you to know when we collect data and how we use it.

The use of our website is usually possible without providing personal data. If personal data (e.g., name, address, telephone number, or email addresses) are collected on our pages, this is always done on a voluntary basis as far as possible. We only use the personal data to answer your inquiry, process your orders, or provide access to information or information sources. These data will not be passed on to third parties or otherwise marketed without your express consent. All our employees and all third parties involved in data processing are obligated to comply with the Federal Data Protection Act and to handle personal data confidentially. Our security measures are continuously revised in line with technological developments.

We have implemented technical and organizational security measures to protect your personal data from loss, destruction, manipulation, and unauthorized access.

Individuals who have not yet reached the age of 18 should not transmit personal data to us without the consent of their parents or legal guardians. We do not request personal data from young people and children.

We would like to point out that data transmission over the Internet (e.g., when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible. However, our security measures are continuously improved in line with technological developments.

Rights of Data Subjects / Right to Information

You have the right to free information about your stored personal data, its origin and recipients, and the purpose of data processing at any time, as well as the right to correction, blocking, restriction of processing, data portability, or deletion of this data. If you have any questions about personal data, you can contact us at any time using the address provided in the imprint.

Right to Object

You can revoke your consent to the collection and storage of your personal data by us at any time. Please write to us by mail or email to do so.

Cookies

Below you will find information about cookies, how we use them on our website, and what options you have if you prefer to deactivate these cookies despite their benefits. If you do not deactivate cookies, we assume that you consent to the use of cookies.

What are Cookies?

Cookies are small text files that are stored on your computer or mobile device. Data is stored by your browser, such as Firefox, Google Chrome, and Safari. Most of the cookies we use are called "session cookies." They are automatically deleted after your visit. Other cookies remain on your device until you delete them. These cookies allow us to recognize your browser on your next visit to make using the site easier and more individualized.

You can set your browser to inform you about setting cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. You can find instructions for managing cookies on your browser in the browser's help function or in the operating manual of your smartphone. If you deactivate cookies, the functionality of this website may be restricted. Cookies do not cause any damage to your computer and cannot contain viruses.

Which Cookies are Used?

Cookies are used that remember your personal settings (e.g., selected language). The cookies used are intended to make our offer more user-friendly, effective, and secure.

We strive for continuous improvement of the website. For this purpose, cookies are used that provide us with an overall statistic of the number of visitors, which areas of a page are viewed the most, information about the city or location of users, and the duration of the visit, etc. These can be installed by external analysis providers commissioned by us. These cookies only collect anonymized data that enables analysis of the use of our website.

Cookie Settings

You can change your cookie settings here:

Cookie-Settings

Social Plugins / Social Media Cookies

Our website uses so-called social plugins from social networks. In order to share content from our website via social media channels such as Facebook or Twitter, a cookie must be installed on your device.

By integrating the plugins, the providers receive information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective provider or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider and stored there.

If you are logged into one of the social networks, the providers can directly assign the visit to our website to your profile on Facebook or Twitter. When you interact with the plugins, such as pressing the "Like" button, the "+1" button, or the "Tweet" button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published on the social network or on your Twitter account and displayed to your contacts there.

The purpose and scope of data collection, as well as the further processing and use of the data by the providers, and your rights and setting options to protect your privacy, can be found in the privacy notices of the providers:

Usage of Google Maps or OpenStreetMap

On our website, we utilize "Google Maps" provided by Google Ireland Ltd., located at Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, hereinafter referred to as "Google."

Every time you access "Google Maps," Google sets a cookie to process user data and user settings when displaying the page where "Google Maps" is integrated. This cookie is not deleted when you close your browser but expires after a certain period, unless you manually delete it before that.

If you do not agree with the processing of your data, you have the option to deactivate the "Google Maps" service and thus prevent the transmission of data to Google. To do so, you need to deactivate the JavaScript function in your browser. However, please note that in this case, you may not be able to use "Google Maps" or only use it with limitations.

The use of "Google Maps" and the information obtained through "Google Maps" are subject to the following Google terms of use: http://www.google.com/intl/en/policies/terms/regional.html and the additional terms of use for "Google Maps": https://www.google.com/intl/en_de/help/terms_maps.html.

In specific cases, we also integrate maps from the service provider "OpenStreetMap" (https://www.openstreetmap.org). These maps are based on the Open Data Commons Open Database License (ODbL), provided by the OpenStreetMap Foundation (OSMF). OSMF's Privacy Policy applies.

To the best of our knowledge, user data collected by OpenStreetMap is exclusively used for the following purposes: displaying map functions and caching selected settings. The collected user data primarily includes IP addresses and location data.

Server Log Files / Server Data

For technical reasons, the provider of the pages collects the following data and automatically stores information in server log files that your browser automatically transmits to us.

Browser type and browser version
Operating system used
Referrer URL (website from which you visit us)
Hostname of the accessing computer
Date and time of your access / server request
Your Internet Protocol (IP) address.

These anonymous data are stored separately from any personal data you may provide and cannot be attributed to specific individuals. The merging of this data with other data sources is not performed. We reserve the right to retrospectively check these data if we become aware of specific indications of unlawful use. The data is evaluated for statistical purposes in order to optimize our website and offerings.

Use of Honeypot or reCAPTCHA

We protect input forms on our website using the Honeypot method as an alternative to the "reCAPTCHA" query. This mechanism is free from third-party providers and is executed directly on the website; there is no connection to external services.

In special cases, the security check in the online form is performed using the "reCAPTCHA" service provided by Google Ireland Ltd., located at Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, hereinafter referred to as "Google." This deployment distinguishes whether the input in question is of human origin or abusive automated machine processing.

To the best of our knowledge, the referrer URL, IP address, website visitor behavior, information about operating systems, browsers, and dwell time, cookies, display instructions and scripts, user input behavior, and mouse movements within the "reCAPTCHA" checkbox area are transmitted to "Google."

Google uses the information obtained in this way, among other purposes, to digitize books and other printed materials, as well as to optimize services like Google Street View and Google Maps (e.g., recognizing house numbers and street names).

The IP address transmitted as part of "reCAPTCHA" is not merged with other Google data unless you are logged into your Google account at the time you use the "reCAPTCHA" plug-in. If you wish to prevent this transmission and storage of data about you and your behavior on our website by "Google," you must log out of "Google" before visiting our site or using the reCAPTCHA plug-in.

The use of the "reCAPTCHA" service is subject to the Google Terms of Use: https://www.google.com/intl/en/policies/privacy/

Use of Webfonts

This website uses external fonts provided by Google Fonts for a consistent presentation of fonts. These fonts are stored locally on our own server or webspace and are called via a server located in Germany. There is no connection to Google servers. In specific cases, external fonts from Google Inc. (Google) are used. The integration of these web fonts is done by making a server call to Google in the USA. This transfers to the server which of our websites you have visited. The IP address of the visitor's browser's end device is also stored by Google. Further information can be found in Google's privacy policy, which you can access here: www.google.com/fonts#AboutPlace:about or www.google.com/policies/privacy/.

Publication of Job Advertisements / Online Job Applications

We electronically collect and process your application data for the purpose of handling the application process. If your application leads to an employment contract, the transmitted data may be stored in your personnel file for the purpose of the usual organizational and administrative process, in compliance with the relevant legal regulations.

The deletion of your transmitted data will be automatically carried out two months after the announcement of the rejection. This does not apply if longer storage is required due to legal requirements (e.g., proof obligation under the General Equal Treatment Act) or if you have explicitly agreed to longer storage in our interested parties database.

Right to Amend

We reserve the right to amend our privacy policy due to technical developments, for example. If you are dissatisfied with the privacy measures presented here or if you have any questions regarding the collection, processing, and/or use of your personal data, we would be pleased to hear from you. We will make every effort to answer your questions as quickly as possible and implement your suggestions. Please contact us.

Right to Lodge Complaints with the Competent Supervisory Authority

In the event of violations of data protection regulations, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/EN/Infothek/Anschriften_Links/anschriften_links-node.html

Use of Third-Party Content on Our Website:

Within the framework of our website, pages/information with third-party content are also used. These come from, among others:

• Adobe Stock - Photo Database - stock.adobe.com

To the extent that users of our homepage use external links that we provide on our homepage, our privacy policy does not cover these external links. We have no influence on compliance with data protection and security regulations by the respective providers of the external links. When you access these pages, your browser establishes a direct connection to the server of the external provider. This provider may store the IP address for statistical purposes. This data cannot be attributed to specific individuals. The author is responsible for the content of the external pages. Therefore, we exclude all liability for external content.

Analysis tools and advertising

Matomo

This website uses the open-source web analysis service Matomo.

Through Matomo, we are able to collect and analyze data on the use of our website-by-website visitors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.). The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

IP anonymization

For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that it is no longer clearly assignable to you.

Analysis without cookies

We have configured Matomo in such a way that Matomo will not store cookies in your browser.

Hosting

We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

Our social media appearances

This privacy policy applies to the following social media presence

Data processing through social networks

We maintain publicly available profiles in social networks. The individual social networks we use can be found below.

Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g., like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.

Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal basis

Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g., Facebook).

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Storage time

The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.

We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g., in their privacy policy, see below).

Your rights

You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to object, the right to data portability and the right to file a complaint with the responsible regulatory agency. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.

Individual social networks

Facebook

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries.

We have signed an agreement with Meta on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Meta are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

Instagram

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

For details on how they handle your personal information, see the Instagram Privacy Policy: https://privacycenter.instagram.com/policy/.

LinkedIn

We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy?hl=en.