Privacy Policy
We take data protection seriously
The protection of your privacy during the processing of personal data is an important concern for us. When you visit our website, our web servers automatically record the IP address of your Internet service provider, the website from which you visit us, the pages on our website you visit and the date and duration of your visit. This information is absolutely necessary for the technical transmission of the web pages and the secure server operation. A personalized evaluation of this data does not take place. If you send us data via contact form, this data will be stored on our servers in the course of data backup. Your data will only be used by us to process your request. Your data will be treated strictly confidential. Your data will not be passed on to third parties. Responsible party: Finetech GmbH & Co. KG Boxberger Str. 14 12681 Berlin Phone: +4930936681-0 E-mailPersonal data
Personal data is data about your person. This includes your name, address and email address. You also do not have to disclose any personal information to visit our website. In some cases, we need your name and address and other information to provide you with the service you requested.
The same applies if we supply you with information material on request or if we answer your enquiries. In these cases we will always point this out to you. In addition, we only store data that you have transmitted to us automatically or voluntarily.
If you use one of our services, we usually only collect the data necessary to provide you with our service. We may ask you for further information, which is voluntary. Whenever we process personal data, we do so in order to provide you with our service or to pursue our commercial goals.
Automatically stored data
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested.
- Access status (file transferred, file not found, etc.)
- web browser and operating system used
- complete IP address of the requesting computer
- transferred data volume
This data will not be merged with other data sources. Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
For reasons of technical security, in particular to prevent attempts to attack our web server, we store this data for a short period of time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymized at domain level by shortening the IP address so that it is no longer possible to establish a reference to the individual user. In addition, the data is processed anonymously for statistical purposes; it is not compared with other data or passed on to third parties, even in excerpts. The number of page views is only shown in our server statistics, which we publish every two years in our activity report.
Cookies
Registration on the website
The data subject has the possibility to register on the website of the party responsible for the data processing by providing personal data. The following personal data is collected in the process: Name, address, telephone number, e-mail address.
By registering on the website of the party responsible for the data processing, the IP address assigned by the Internet service provider (ISP) of the data subject, the date and the time of registration are also stored. The storage of this data takes place against the background that this is the only way to prevent misuse of our services and, if necessary, the data make it possible to clarify committed crimes. In this respect, the storage of this data is necessary for the protection of the party responsible for the data processing. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.
The registration of the data subject by voluntarily providing personal data serves the purpose of the party responsible for the data processing to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to modify the personal data provided during registration at any time or to have it completely deleted from the database of the party responsible for the data processing.
You are obliged to treat the personal access data confidentially and not to make it accessible to any unauthorized third party. We cannot accept any liability for misused passwords unless we are responsible for the misuse.
With the “stay logged in” function, we would like to make your visit to our websites as pleasant as possible. This function allows you to use our services without having to log in again each time. For security reasons, however, you will be asked to enter your password again if, for example, you want to change your personal data or place an order. We recommend that you do not use this function if the computer is used by multiple users. We would like to point out that the “stay logged in” function is not available if you use a setting that automatically deletes stored cookies after each session.
Newsletter
For sending out the newsletter, we use the so-called double opt-in procedure, i.e. we will only send you a newsletter by e-mail if you have previously expressly confirmed that you want us to activate the newsletter service. We will then send you a notification e-mail and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this e-mail. When you subscribe to our newsletter, we store your IP address and the date of subscription. This storage serves solely as evidence in case a third party misuses your e-mail address to register you for the newsletter without your knowledge or authorization. If you do not wish to receive any more newsletters from us at a later date, you can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs.
Google Tag Manager
This website uses Google Tag Manager. The Tag Manager does not collect personally identifiable information. The tool triggers other tags that may themselves collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager. Google’s privacy policy for this tool can be found here.
Google Analytics
For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address will not be merged with other data from Google.
For the purpose of optimized marketing of our website, we have activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data sharing with Google under these data sharing settings is based on an additional agreement between responsible parties. We have no influence on the subsequent data processing by Google.
To create and run tests, we also use the Google Analytics Google Optimize extension feature.
For web analysis, the Google Analytics Google Signals extension function enables so-called “cross-device tracking”. If your Internet-enabled devices are linked to your Google account and you have activated the “personalized advertising” setting in your Google account, Google can create reports about your usage behavior (in particular the cross-device user numbers), even if you change your end device. A processing of personal data by us does not take place in this respect, we only receive statistics generated on the basis of Google Signals.
For web analysis and advertising purposes, the extension function of Google Analytics, the so-called DoubleClick cookie, enables recognition of your browser when visiting other websites. Google will use this information to compile reports on website activity and to provide other services related to website usage.
Woopra
We use the statistics tool Woopra. This tool enables us to make our Internet offer more user-friendly, as this tool provides us with the country and region of origin, the operating system used, the browser used and the resolution used. These data cannot be assigned to specific persons. This data is stored on Woopra’s servers. Woopra will not make this data accessible to third parties (Woopra data protection declaration).
Google Ads
For advertising purposes in Google search results as well as on third-party websites, the so-called Google Remarketing Cookie is set when you visit our website, which automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information as well as information about your use of our website) and by means of a pseudonymous CookieID and on the basis of the pages you visit. Data processing beyond this only takes place if you have activated the “personalized advertising” setting in your Google account. In this case, if you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing.
Youtube
To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the extended data protection mode used by us, transmitted to Google and subsequently processed by Google only when you play a video.
GA Audience
Our website uses GA Audience, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: GA Audience). GA Audience uses, among other technologies, cookies that are stored on your computer and other mobile devices (e.g. smartphones, tablets, etc.) and that enable an analysis of the use of the respective devices. The data is partially evaluated across devices. Google Audience receives access to the cookies created in the context of the use of Google Adwords and Google Analytics. In the course of use, data, such as in particular the IP address and activities of the user may be transmitted to a server of the company Google and stored there. Google may transfer this information to third parties if this is required by law or if processing of this data by third parties takes place. Further information on data protection when using GA Audience can be found here.
Google Googleadservices / Google AdWords Conversion Tracking
This website uses tools for “online marketing” of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This is used to recognize that a visitor has come across our website via a Google ad. Google uses cookies that are stored on your computer and enable an analysis of the use of the website. The cookies for the so-called “conversion tracking” are set when you click on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If you wish to prevent “conversion tracking”, you can set your browser to block cookies from the domain “googleadservices.com”. You can also exercise your right to opt-out.
If you would like to learn more about these methods or what options you have to prevent this information from being used by Google, click here.
LinkedIn Insight Tag
This website uses the Insight Tag from LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the key professional data (e.g., career level, company size, country, location, industry, and job title) of our website visitors and thus better tailor our site to the respective target groups. Furthermore, we can use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also be done across devices (e.g., PC to tablet). LinkedIn Insight Tag also offers a retargeting function that allows us to display targeted off-site advertising to visitors to our website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.
LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.
The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the collected personal data of website visitors on its servers in the USA and use it in the context of its own advertising measures. For details, please refer to LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.
The use of LinkedIn Insight is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GPDR and 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
Object to the analysis of usage behavior as well as targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Furthermore, members of LinkedIn can control the use of their personal data for advertising purposes in the account settings. To prevent the linking of data collected on our website collected on our website by LinkedIn and your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
We have concluded a contract on order processing (AV) according to Art. 28 GDPR with the provider mentioned above. This is a contract required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Salesforce Sales Cloud
We use Salesforce Sales Cloud to manage customer data. The provider is salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich (hereinafter “Salesforce”).
Salesforce Sales Cloud is a CRM system and enables us, among other things, to manage existing and potential potential customers and customer contacts and to organize sales and communication processes. Using the CRM system also enables us to analyze our customer-related processes. Customer data is stored on Salesforce servers. Personal data may also be transmitted to the parent company of salesforce.com Germany GmbH, salesforce.com inc, Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA.
Details on the functions of Salesforce Sales Cloud can be found here:
https://www.salesforce.com/de/products/sales-cloud/overview/.
The use of Salesforce Sales Cloud is based on Art. 6 para. 1 lit. f GDPR. The
website operator has a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Salesforce has Binding Corporate Rules (BCR) that have been approved by the French data protection authority. These are binding corporate rules that legitimize the internal transfer of data to third countries outside the EU and the EEA. Details can be found here:
https://www.salesforce.com/de/blog/2020/07/die-binding-corporate-rules-von-salesforce-erfuellenhoechste-da.html.
For details, please refer to Salesforce’s privacy policy:
https://www.salesforce.com/de/company/privacy/.
We have concluded an order processing contract (AV) in accordance with Art. 28 GDPR with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Security
We have taken technical and administrative security precautions to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees and service providers working for us are obliged to comply with the applicable data protection laws.
Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a continuous improvement process and our data protection declarations are constantly revised. Please make sure that you have the latest version.
Rights of the individuals affected
You have the right at any time to information, correction, deletion or restriction of the processing of your stored data, a right of objection to the processing as well as a right to data transfer and a right of complaint in accordance with the requirements of data protection law.
Right to information:
You can request information from us as to whether and to what extent we process your data.
Right to correction:
If we process your data that is incomplete or incorrect, you can demand that we correct or complete it at any time.
Right to deletion:
You can demand that we delete your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that prevent an immediate deletion, e.g. in the case of legally regulated storage obligations.
Irrespective of the exercise of your right to deletion, we will delete your data immediately and completely, insofar as there is no legal or statutory obligation to retain data in this respect.
Right to limitation of processing:
You can demand that we restrict the processing of your data if
- You dispute the accuracy of the data for a period of time that allows us to verify the accuracy of the data.
- the processing of the data is unlawful, but you refuse to delete it and instead demand a restriction on the use of the data,
- we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
- you have objected to the processing of the data.
Right to data transfer:
You may request that we make available to you the data that you have provided to us in a structured, common and machine-readable format and that you may transfer this data to another responsible person without our obstruction, provided that
- we process this data on the basis of your given and revocable consent or for the fulfilment of a contract between us, and
- such processing is carried out using automated procedures.
If technically feasible, you may request us to transfer your data directly to another responsible party.
Right of objection:
If we process your data for legitimate reasons, you may object to such processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms or the processing serves the assertion, exercise or defence of legal claims. You can object to the processing of your data for the purpose of direct marketing at any time without giving reasons.
Right of appeal:
If you are of the opinion that we violate German or European data protection law when processing your data, please contact us in order to clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for you, the respective state office for data protection supervision.
If you wish to assert any of the above rights against us, please contact our data protection officer. In case of doubt, we can request additional information to confirm your identity.
Changes to this Privacy Policy
We reserve the right to change our privacy policy if necessary due to new technologies. Please make sure you have the latest version. If any material changes are made to this privacy statement, we will post those changes on our website.
All interested parties and visitors to our website can contact us with questions about data protection:
Matthias Haßler LL.M.
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg, Germany
Phone: 0941 2986930
Fax: 0941 29869316
E-Mail
Internet: www.projekt29.de
