Data Protection Statement
Contact details of the company
Gewerbepark Birkenhain 1
Phone +49 6051 8846-0
Fax +49 6051 8846-480
Thomas Kolb LL.M., external Data Protection Officer
Fax +49 621/121829-32
Categories of data; data sources
As a matter of principle, we process the personal data that you provide us within the context of an inquiry, a pre-contractual legal relationship or a contractual relationship. In individual cases, and as far as this is necessary within the scope of the fulfilment of the contract, we also process personal data which have been acquired admissibly from publicly accessible sources (e.g. commercial register, debtor’s register, Internet) or which have been communicated to us admissibly by third parties (e.g. credit agencies).
This may include information relating to your person (name, date of birth, legal representative), address data (postal address, e-mail address, contact person), financial data (name of accountholder, IBAN, BIC), contract data (contract period, services purchased, cancellations), communication data (correspondence, e-mail correspondence), advertising data (advertising correspondence) and other, comparable categories of personal data.
General processing of data relating to visitors of our website
The use of our website is principally possible without providing personal data.
We would nevertheless like to point out that in this case, too, access data are collected and stored in the server logfiles. This includes, in particular, the following data:
- type and version of your browser
- operating system
- the website from which you are visiting us
- date and time of your visit
- your IP address
In principle we evaluate this information in anonymised form to prevent attacks (processing of personal data in the context of a balancing of interests pursuant to point (f) of the first subparagraph of Article 6 (1) GDPR) and erase it thereafter. As a matter of principle, the data cannot be traced back to personally you by us, neither are the data combined with other data.
In case of concrete indications of unlawful usage, however, we reserve the right to evaluate the data retroactively.
Various cookies may be used during your visit to our website. Cookies are text files which are placed on your computer and enable, amongst others, an unimpeded visit to our website.
Cookies are in part necessary to be able to provide our website functionality. Such function cookies are used on the basis of a legitimate interest in enabling the use of our website including its functions, pursuant to point (f) of the first subparagraph of Article 6 (1) GDPR.
We employ other – nonessential – cookies on the basis of point (a) of the first subparagraph of Article 6 (1) GDPR, and thereby on the basis of your consent. The purposes of the respectively employed cookies include:
- to allow the use of special functions,
- to analyse usage behaviour (in a pseudonymised manner) in order to optimise our website,
- to improve the attractiveness and user-friendliness of our website,
- to improve our offering and to tailor it to meet users’ needs.
Non-essential cookies are used in the context of so-called usage profiles. In doing so, you are assigned a pseudonym under which the usage data are stored. Your IP address is used exclusively in truncated form, thereby fundamentally preventing the establishment of an association between the usage profile and a specific person.
The majority of the cookies we use are erased from your computer again after your browser is closed (session cookies). Other types of cookies may remain on your computer, and enable us to recognize your computer again by means of the saved user profile when you next visit our website (persistent cookies).
When using our website, you can declare your consent by confirming this via our cookie banner.
You may withdraw your consent, once given, at any time with effect for the future.
If you contact us by email or via a form provided on our website, the personal data you provide us will be processed by us to answer your inquiry. We will erase the data once your inquiry has been conclusively dealt with, provided that the data are not subject to a contractual or statutory obligation to retain them.
Processing of personal data subject to consent (point (a) of first subparagraph of Article 6 (1) GDPR)
In individual cases, we will request your consent to certain specifically stated purposes connected with the data collection (e.g. inquiry via a contact form, opening a customer account, ordering a newsletter, use of advertising cookies and analytics cookies).
Your data will only be processed if you give us your consent. Under certain circumstances, the handling of your request may not be possible without you giving us your consent, and the handling of your request must therefore be made conditional thereon. The data will be processed exclusively for the purpose(s) expressly stated.
You may withdraw your given consent at any time with effect for the future. The withdrawal has no influence on the lawfulness of the processing before your consent was withdrawn.
If you send us an inquiry via our contact form, we will process the data you provide us – by virtue of your consent pursuant to point (a) of the first subparagraph of Article 6 (1) GDPR – to handle your inquiry.
As a matter of principle, your data will be erased after your inquiry has been dealt with, provided that the data are not subject to a contractual or statutory obligation to retain them. If you send us information of a contractually relevant nature, we will transfer this to our system for existing customer relationships.
You may withdraw at any time with effect for the future your consent to our use of all your furnished contact data.
Processing of personal data for performance of contract (point (b) of first subparagraph of Article 6 (1) GDPR)
If you enter into a contract with us, we will use personal data to the extent needed for performance of contract and / or for implementing pre-contractual measures. The purposes of the data processing will be determined by the concrete contents of the contract which can be found in the contractual documents.
Processing of personal data in the context of a balancing of interests (point (f) of first subparagraph of Article 6 (1) GDPR)
We process personal data in the context of a balancing of interests provided that this is necessary to safeguard our own interests and / or the interests of third parties.
Examples of such purposes are:
- ensuring the IT security and integrity of our systems
- preventing or investigating criminal offences
- asserting / repulsing legal claims
Creation of pseudonymised usage profiles for web analytics
This website uses Google Analytics, a Web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called “cookies”, text files placed on your computer that enable an analysis of the way you use the website.
In the context of using cookies, we draw on your consent to the data collection. Consequently, if you do not give your consent to the data processing when you first visit our website, we will not record your usage behaviour or other personal data which could arise during your website visit and, thus, also desist from using them for subsequent usage analytics or for remarketing campaigns. This also applies to third-party cookies such as this Google Analytics plugin.
If you agree to the processing of your data in the context of the opt-in procedure (confirmation of the cookie banner), the lawfulness of the processing of your data is based on a consent in accordance with point (a) of the first subparagraph of Article 6 (1) GDPR, and we shall use your data for the purposes of marketing and evaluating your usage behaviour within the scope of your given consent.
The information the cookie generates concerning your usage of this website is generally transmitted to a server of Google LLC in the USA where it is then stored. Information regarding the usage of this website and your IP address may possibly be transmitted to a Google server in the USA and also stored on this server. Google LLC is a Privacy Shield certified company, so in addition to your consent, the transfer of data to Google is also based on the EU Commission’s adequacy decision regarding the exchange of data between the EU and the US. If IP anonymisation is enabled on this website, however, Google will truncate your IP address beforehand within a Member State of the European Union or in another state that is party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and truncated there.
Google will use this information on behalf of this website’s operator to evaluate your website usage, to compile reports about the website activities for the website operators, and to provide further services to the website operator in connection with website usage and Internet usage. The IP address which your browser transmits in the context of Google Analytics will not be combined with any other data held by Google provided that, in the settings of a Google account, you have not configured the settings of web and app activities to permit such combination by Google.
Further information on the terms and conditions of use and on data privacy can be found at https://marketingplatform.google.com/about/analytics/terms/de/ or at https://policies.google.com/?hl=de&gl=de.
On our website, Google Analytics has been supplemented with the code “anonymizeIp” to be able to collect IP addresses anonymously (so-called IP masking).
Use of Vimeo
We use a plugin of the service provider of Vimeo LLC, which is headquartered at 555 West 18th Street, New York, New York 10011, USA (“Vimeo”).
In the context of using plugins, we draw on your consent to the data collection. Consequently, if you do not give your consent to the data processing when you first visit our website, the plugin of Vimeo will not be enabled, so that data will not be transferred even if you unintentionally interact with a Vimeo plugin.
If you agree to the processing of your data by the plugin of Vimeo in the context of the opt-in procedure, the lawfulness of the processing of your data is based on a consent in accordance with point (a) of the first subparagraph of Article 6 (1) GDPR, and we shall use your data for the purposes of linking to Vimeo within the scope of your given consent.
In this case, when an Internet page containing such a plugin is called up, a connection will be established to the Vimeo servers and the plugin be shown. The page that you have visited is transmitted to the Vimeo server. If you are logged in to your Vimeo user account at the time of the call, the website call will be assigned accordingly. Further information, such as confirming the start button, can also be assigned to your user account.
Information concerning your usage of this website and your IP address is sent to a server of Vimeo in the USA where it is also stored. Vimeo is a Privacy Shield certified company, so in addition to your consent, the transfer of data to Vimeo is also based on the EU Commission’s adequacy decision regarding the exchange of data between the EU and the US (see also: https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=Active).
Use of Google Fonts
We use Google Fonts in offline mode to display external fonts. This service is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Data are not passed on here to servers of Google. The processing is necessary for a proper presentation of our Internet presence and is therefore in our interest as well as in yours. The legal basis for the processing is therefore point (f) of the first subparagraph of Article 6 (1) GDPR with regard to the public presentation of the company by means of a correctly functioning website.
Links to other websites
Our website contains links to other external websites (Facebook, Twitter, LinkedIn and YouTube). These are pure links and not plugins. If you click on a link, you will call up the corresponding website and be forwarded to it.
In addition, the providers of the aforementioned websites process your personal data for their own purposes. We can make no claims about the nature of the processing, the purposes or the storage period of your personal data by these providers. Please refer to the data privacy policies of the respective provider for further details about how these process your personal data. They can be found at:
Forwarding of data
We will forward your data to third parties if you have given us your consent to do so, or if this is necessary for fulfilling contractual or legal obligations.Data may also be forwarded within the CID Group; the CID Group consists of the following companies:
- CID Consulting GmbH domiciled in Germany
- CID Media GmbH domiciled in Germany
- CID Slovakia s.r.o. domiciled in Slovakia
- CID Lietuva UAB domiciled in Lithuania
- CID Mobility GmbH domiciled in Germany
Data are forwarded within the Group, to the extent that this is necessary for fulfilling contractual or legal obligations (points (b) and (c) of the first subparagraph of Article 6 (1) GDPR) or where a legitimate interest exists in a Group-wide forwarding of the data (point (f) of the first subparagraph of Article 6 (1) GDPR).
Data are always forwarded on the basis of a legal standard or an appropriate contract pursuant to Article 26 or Article 28 GDPR which ensures that all data protection requirements are observed. Where data are forwarded to a third state, we always ensure that the requirements of Article 44 et seq GDPR are fulfilled, and that an adequate level of data protection is thus maintained.
Apart from that, data will be forwarded in cases required by law, such as in the case of a statutory duty to provide information to law enforcement agencies.
Rights of data subjects
As the data subject of the processed personal data, you have the following rights:
You have the right to demand confirmation as to whether personal data concerning your person are processed. Where this is the case, you have the right to information about the personal data and the specific information set out under Article 15 GDPR.
You have the right to demand of the controller that inaccurate personal data concerning your person be rectified without undue delay and that any incomplete personal data be completed (Article 16 GDPR).
You have the right to demand of the controller that personal data concerning your person be erased without undue delay provided that one of the specific grounds set out under Article 17 GDPR applies, e.g. when the data are no longer needed for the pursued purpose (right to erasure).
You have the right to demand of the controller that processing be restricted where one of the conditions set out under Article 18 GDPR is satisfied, e.g. where you have objected to the processing, for the duration of the investigation by the controller.
You have the right to object at any time to processing of personal data concerning your person on grounds relating to your particular situation. The controller with then no longer process the personal data unless the controller can demonstrate compelling legitimate grounds for the processing which override your own interests, rights and freedoms, or if the processing serves to establish, exercise or defend legal claims (Article 21 GDPR).
With respect to the exercise of your rights, you can contact us at any time using the contact options provided on our website.
Right to lodge a complaint
Sie haben unbeschadet eines anderweitigen verwaltungsrechtlichen oder gerichtlichen Rechtsbehelfs das Recht auf Beschwerde bei einer Aufsichtsbehörde, wenn Sie der Ansicht sind, dass die Verarbeitung der Sie betreffenden personenbezogenen Daten gegen die DSGVO verstößt (Art. 77 DSGVO). Sie können dieses Recht bei einer Aufsichtsbehörde in dem Mitgliedstaat Ihres Aufenthaltsorts, Ihres Arbeitsplatzes oder des Orts des mutmaßlichen Verstoßes geltend machen. In Hessen ist zuständige Aufsichtsbehörde der Hessische Datenschutzbeauftragte.
Nähere Informationen erhalten Sie auf dem Serviceportal des Landes Hessen unter folgendem Link:
Selbstverständlich können Sie sich jedoch auch direkt an uns wenden, wenn Sie unzufrieden sind oder Fragen zum Datenschutz haben. Am schnellsten erreichen Sie unseren internen Ansprechpartner zum Thema Datenschutz unter den folgenden Kontaktdaten:
Thomas Kolb LL.M., externer Datenschutzbeauftragter
Fax +49 621/121829-32
Right to lodge a complaint
You are principally under no obligation to provide data. It may, however, be necessary to provide data in order to use certain functions or enter into a contract. If you do not provide the required data in such cases, it may be impossible for you to use certain functions or services, or for you to enter into a contract.