Data privacy statement
For the processing of our data in the context of our website and for establishing contact with the help of contact forms and e-mail newsletters.
Basic information on data processing
Thank you for your interest in our website. The protection of your personal data is of paramount concern for us. We therefore want to inform you comprehensively about the information we collect on our websites, the purpose we use it for, who we might make it available to and what rights you have (Art. 12 and Art. 13 of the General Data Protection Regulation – GDPR).
Regulation (EU) 2016/679 (GDPR), which will become effective on May 25, 2018, but still inform you as well about the provisions of the former German Federal Data Protection Act (BDSG a. F.), which will continue in force until it is superseded on May 25, 2018 by a new Federal Data Protection Act (BDSG n. F.) with the same name. If we cite provisions of the “BDSG a. F.” below, this applies through May 24, 2018, and the provisions of “BDSG n. F.” as well as the GDPR from May 25, 2018, on. If personal data should be handled with the respective process, we want to signify with a simple parenthetical citation which standard is used to justify the data processing.
The controller of the data file and the controller under data protection law is:
icotek GmbH
Bischof-von-Lipp-Straße 1
D-73569 Eschach
Telefon: +49-(0)7175 / 92380-0
Telefax: +49-(0)7175 / 92380-50
E-mail: datenschutzbeauftragter(at)icotek(dot)com
I. Object of the data protection
The object of the data protection is personal data. Personal data, according to the Federal Data Protection Act (BDSG), is all individual information about personal or factual circumstances of an identified or identifiable natural person. In addition, the GDPR defines “personal data” as any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.
If not discernible in this document or from other circumstances, we consider ourselves incapable of identifying you.
II. Security
We take internal company data protection very seriously. We contractually obligate our employees and the processors (service companies) we engage to maintain confidentiality and to observe the IT/security rules and the applicable data protection provisions.
We as well as our contractual partners protect your personal data against unauthorized access, loss, use or dissemination and ensure that your personal information is in a legally required, controlled, safe environment which prevents unauthorized accesses, loss or dissemination.
Technical and organizational measures have been undertaken in our company to ensure that our company observes the legal requirements of the BDSG and the GDPR and to protect your data against damage, destruction, corruption, manipulation and unauthorized access.
To avoid unnecessary amounts of data, we process and use your personal data only to the extent this is required within the scope of our range of services.
Data is collected by icotek GmbH as well as by the processors it engages.
III. Purpose, legal basis and data categories
In general, you are not required to supply personal data when visiting our website. However, from a technical perspective, the IP address transmitted by your system is needed to transmit the data of our website to you.
IV. Collection, storage of usage data during a visit to our website, use of cookies
When you visit our website, we receive your full IP address from your computer. Only with this IP address are we able to transmit the data of our website to you so that the website displays for you (§ 28 (1) first sentence no. 2 BDSG a. F.; Art. 6 (1) b and f GDPR). Beyond the processing for transmission of the called up data, the full IP address is stored for only seven days in order to be in a position to initiate defensive measures against attacks on our IT, such as a block of IP addresses as well as possible criminal prosecution (§ 28 (1) first sentence no. 2 BDSG a. F.; Art. 6 (1) f GDPR).
We store the date and time of the page view and the page from which you called up our page. We store no other personal data as long as you do not log in.
If the programming of our website prompts your browser to load data from servers operated by third parties, we are not, as such, involved in these data transmissions. Our third-party suppliers have asked us to inform you of the following:
1. Google Analytics
We use Google Analytics, a web analytics service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics employs the cookies described in our Cookie Policy that facilitate analysis of your use of our websites and online services. The information generated on your use of these websites and online offerings—including information on device events, such as crashes, system activity, hardware settings, browser type, browser version, browser language, installed add-ins, screen resolution, device type, date and time of your query and referring URL—are transmitted on our behalf to a server of Google in the United States and stored indefinitely. We use Google Analytics only with the activated IP anonymization extension “_anonymizeIp()”. This means that IP addresses transmitted to Google are truncated and processed in advance by Google on servers residing in the EU in order to exclude a direct identification of an individual through the IP address in the US. Only in exceptional cases is the full IP address transmitted to a server of Google in the US and then truncated there.
We use this information to analyze visits to the website in order to compile reports about the website activities for us so that we better understand how our site is used and where we can improve it (§ 28 (1) first sentence no. 2 BDSG a. F.; Art. 6 (1) b and f GDPR). Pseudonymous usage profiles can thereby be created from the processed data. Google also transfers this information to third parties where necessary if such is legally required or if third parties process such data on behalf of Google. Google will in no event associate your IP address with other data of Google.
You can find further information on data usage for advertising purposes through Google, setting options and ways to object on the websites of Google: “How Google uses data when you use our partners' sites or apps”, “Data usage for advertising purposes”, “Control the information Google uses to show you ads” and “Make the ads you see more useful to you”.
You have a right to object and you can prevent the installation and storage of the cookie for Google Analytics through a corresponding setting in your browser. You can find details in your browser under Help. In addition, you can prevent collection, for Google, of the data that is generated by the cookie and related to your use of the online offering as well as the processing of such data by Google by downloading and installing the browser plug-in of Google available at the following link.
An opt-out cookie will be set to prevent the collection of your data when visiting this website in the future. With this browser plug-in, the collection and storage of data for Google Analytics can also be objected to at any time with future effect.
2. Google Conversion Tracking
As an AdWords customer, we also use “Google Conversion Tracking,“ an analytic service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google AdWords uses it to set a cookie (“conversion cookie“) on your computer if you have reached our website through a Google ad. These cookies expire after thirty days and are not used for personal identification. If you visit certain pages of ours and the cookie has not yet expired, we and Google can recognize that someone has clicked on the ad and was thus redirected to our page. Each AdWords customer receives a different cookie. Cookies therefore cannot be used to identify you or your path on the Internet on successive visits at different websites. The information obtained using the conversion cookie serves to create conversion statistics for AdWords customers who have decided to use conversion tracking. We consequently receive usage statistics about those users who reach our website through a Google ad and can thereby track how successful each of our promotional ads is and how suitable for you they have been for your search topic (§ 28 (1) first sentence no. 2 BDSG a. F.; Art. 6 (1) f GDPR).
As an AdWords customer, we learn the total number of users who have clicked on our ad and were redirected to a page furnished with a conversion tracking tag. However, we receive no information with which users can be personally identified. If you do not wish to participate in the tracking process, you can refuse the setting of a required cookie for this—for example, through a browser setting that generally deactivates the automatic setting of cookies. You have a right to object and can, for this purpose, prevent the installation of cookies for Google AdWords (at the domain “googleadservices.com”) through a setting in your browser so that cookies are blocked by the domain “googleadservices.com.” You can find details in your browser under Help. You can find the corresponding cookie names in our Cookie Policy.
You can find the Google Privacy Policy here.
3. Google Remarketing
We use the remarketing technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Through this technology, users who have already visited our websites and online services and been interested in the offering are appealed to again through targeted advertising on the pages of the Google Partner network. The ad is displayed through the use of cookies which include a number. Cookies are small text files that are stored on the computer of the user. Through this number, the visits to the website and anonymized data on the use of the website are collected. This data is amalgamated by Google across services and devices. Ads can be displayed to you based on the information derived from the use of the devices. By its own account, in this process Google collects and saves no personal data of visitors to the website. If you subsequently visit another website in the Google Display Network, ads will be displayed to you which, with a high probability, incorporate product and information areas that have previously been viewed. By means of text files, user behavior while visiting the website can be analyzed and then used for targeted product recommendations for icotek products and interest-based advertising for icotek products (display of ads relevant to previously visited icotek websites) (§ 28 (1) first sentence no. 2 BDSG a. F.; Art. 6 (1) f GDPR).
If you would like not to receive any interest-based advertising (objection), you can categorically deactivate the use of cookies through Google for these purposes by visiting the page https://www.google.de/settings/ads and entering corresponding settings. Alternatively, users can deactivate the use of cookies from third-party suppliers by visiting the deactivation page of the Network Advertising Initiative. You can also prevent cookies for Google Remarketing through a setting in your browser. You can find details in your browser under Help.
You can find the corresponding cookie names in our explanation of cookies.
You can view the Google Privacy Policy at https://policies.google.com/technologies/ads?hl=en
4. Google Maps
We use Google Maps on the website in order to make orientation easier for you. Google Maps is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). When viewing the contact pages, your web browser is instructed to load the functions and map data needed for this directly from the server of Google. These servers may reside in the United States or other countries of the world. We have no control options for this and receive no information from Google about whether you have exchanged corresponding map information during your visit to our page. We are not aware whether Google only delivers the technically necessary information to you or stores and analyzes further data about you or your system, such as IP addresses, information about your browser or the like.
The Google Privacy Policy also applies to Google Maps. We expressly indicate here that Google processes the following categories of data: device-related information, IP address, hardware settings, browser type, browser language, date and time of your query and referring URL, cookies (blockable by you in the browser settings, see also above), location-based information. Google can link the data with other data from you and uses the data collected in the course of the services for provisioning, maintenance, protection and improvement of the Google services, for the development of new services as well as to protect Google and its users. Moreover, Google uses this data to offer you customized content—for example, to provide you more relevant search results and advertising. Using data collected through cookies and other technologies, such as pixel tags, Google improves your user experience and the quality of Google services as a whole. For example, Google facilitates the storage of your preferred language setting in order to display services in the language you prefer. Before Google uses information for purposes other than those listed by Google in the Google Privacy Policy, Google will ask you for your consent. With your consent, Google also shares data with third parties for contract data processing and for legal reasons. You can also change settings related to data privacy at Google when you log in there. In addition, Google abides by various self-regulation obligations, including that of the EU-US Privacy Shield Framework, and processes complaints.
5. Pardot Marketing Automation Services
We would like to point out that we evaluate your user behavior when sending the newsletter. We use the Pardot analysis tool from salesforce.com Inc., The Landmark at One Market, Suite 300, San Francisco, CA 94105, USA.
With the help of Pardot, various customer service and customer management services can be digitally synchronised and processed via a central user interface. Pardot enables the generation of leads, central e-mail and newsletter marketing, contact management through the division of user groups with the help of CRM and the administration of contact forms.
To fulfill the various functions, Pardot uses cookies, small text files that are stored locally in the cache of your web browser on your device and enable us to analyze your use of the website. The cookies collect certain information, such as the IP address, the location, the time of the page view, etc. Information collected using Pardot is stored on Pardot servers and evaluated on our behalf.
If personal data is processed here, the data is processed for statistical analysis of user behavior for optimization and marketing purposes in accordance with Article 6 (1) (f) GDPR. Other legal bases for data processing that are used in the context of specific Pardot services (such as the need for express consent in accordance with Article 6 (1) (a) GDPR when sending newsletters) remain unaffected.
We have concluded an order processing agreement with Pardot, with which we oblige Pardot to protect our customers' data and not to pass them on to third parties.
You can permanently object to the collection of data by Pardot using cookies and the setting of cookies by preventing the storage of cookies through your browser settings.
You can find more information about Pardot's data protection provisions at the following Internet address: https://www.salesforce.com/de/company/privacy/
As far as legally required, we have obtained your consent for the processing of your data described above in accordance with Article 6 (1) (a) GDPR. You can object to the evaluation of your user behavior at any time by clicking on the unsubscribe link provided in every newsletter email or informing us by email to datenschutzbeauftragter (at) icotek (dot) com or another contact channel. The information is stored for as long as you have subscribed to the newsletter. After you unsubscribe, we save the data purely statistically and anonymously.
V. Cookies when visiting our website
Please visit our website with special information on the subject of cookies.
VI. Collection, storage and utilization of usage data when visiting our website
1. Contact forms
When the contact form is used, the information listed there is transmitted to us and stored because of our legitimate interests in speed as well as optimization of our online offering and customer service. We use the data exclusively for replying to your inquiry and, if the inquiry should relate to a contractual relationship, or a contractual relationship arise therefrom, for initiating and handling the contractual relationship (§ 28 (1) first sentence no. 1, 2 BDSG a. F.; Art. 6 (1) a, b, f GDPR). If you are already our customer or will be in the future, we may collect, save, modify and transmit the data for the establishment, execution or termination of the contractual relationship without the need for your consent and for as long as the law permits us to do so.
You have a right to object, with future effect, regarding data transmitted to us through the contact form. You exercise your right of revocation through a communication to us.
2. E-mail newsletter and other direct advertising
If you have registered for our newsletter with your e-mail address, we also use your e-mail address beyond account management for our own advertising purposes, as defined in further detail during the newsletter registration, until you cancel the newsletter subscription (objection option; § 28 (1) first sentence no. 1 BDSG a. F.; Art. 6 (1) a, b GDPR). Should no other advertising purposes be defined, our newsletter will only contain our company information about product highlights, new products, product updates and services as well as special offers and contests from icotek, up-to-date icotek corporate information and event dates. By subscribing to our newsletter, you agree to its receipt and the described processes.
We use the so-called double opt-in process to document the newsletter consent and prevent misuse of your data. Through this process we ensure that the recipient would actually like to receive our newsletter. After the registration you receive an e-mail in which you are asked for confirmation of your newsletter registration. We will not send our newsletter to you until after the reconfirmation.
The registrations for the newsletter are logged in order to be able to substantiate the registration process in accordance with the legal requirements. This includes the storage of both the time of registration and confirmation as well as the IP address. Changes in your stored data are similarly logged.
You can revoke your consent to the receipt of our newsletter at any time. You can unsubscribe at the link in the newsletter or by sending a written notice to icotek, Bischof-von-Lipp-Str. 1, 73569 Eschach, Germany. In case of a written notice, the cancellation is implemented with us within three weeks of receipt.
The consents to the sending of e-mail addresses occur based on Art. 6 (1) (a), Art. 7 GDPR and § 7 (2) no. 3 or (3) of the German Fair Trade Practices Act (UWG). The use of the mailing service provider …, performance of statistical inquiries and analyses, and logging of the registration procedure take place based on our legitimate interests under Art. 6 (1) (f) GDPR. Our interest is directed towards the deployment of a user-friendly and secure newsletter system that is in keeping with our business interests, serves the direct advertising, among other things, and meets user expectations.
If we use your personal data for direct advertising, you may object to this at any time pursuant to Art. 21 GDPR by notifying us.
VII. Storage periods
If no express storage period is indicated upon collection (for instance, as part of a declaration of consent), personal data is deleted when it is no longer required for fulfilling the purpose of storage unless legal retention obligations (such as commercial and tax retention obligations) preclude deletion.
VIII. Your rights to information, correction, blocking, deletion, completion, restriction and data portability
You can, without charge and without giving reasons, obtain information about whether your personal data is processed. Pursuant to Art. 15 GDPR and §§ 34 BDSG n. F., you have the right to information about this personal data and to further information on the processing of your data stored with us.
As part of your legal rights under Art.16, Art. 17 GDPR and §35 BDSG, you can have your data which is stored with us blocked, corrected or deleted.
Your personal data is deleted if no legal retention requirements stand in the way and you request deletion in writing.
Furthermore, you have the right to have incomplete data completed and to demand the curtailment of processing in the statutorily regulated cases in Art. 18 GDPR if the personal data is incorrect.
You also have a right to data portability pursuant to Art. 20 GDPR if we have mentioned Art. 6 (1) a or b GDPR or Art. 9 (2) a GDPR in this declaration as a basis of the data processing. When exercising the right to data portability, you have the right to demand that the personal data be transmitted directly from the controller of the data file to another controller of the data file if this is technically feasible.
IX. Revocation rights
You can, at any time with future effect and without stating reasons, revoke the consents you have given us to collect and use data without thereby affecting the lawfulness of the processing that took place based on the consent up through the revocation. After revocation has occurred, icotek GmbH may further process your personal data only if the processing is required because of another legal basis or statutory obligation. You can address your revocation to controllers or to the contact address indicated in the site notice.
X. Data protection officer
If you have further questions about the protection of your personal data, this data privacy statement, declarations of consent and the processing of your personal data or in case of complaints about data privacy, you can contact our data protection officer at the following e-mail address: datenschutzbeauftragter(at)icotek(dot)com
Independent of the provisions of this data privacy statement, you have in Art. 13 (2) first sentence d GDPR a regulatory right to complain to the competent supervisory authority.
XI. Acknowledgment of the data privacy statement, changes
This data privacy statement is in force from the time of publication on the website of icotek GmbH until revocation.
Confirmation and acknowledgment of the data privacy agreement is absolutely required to make use of our offering.
Please bear in mind that data protection regulations and handling on data privacy can change continually and the content of this data privacy statement must be conformed. If this should be the case, we will present changes in a transparent form for you. In addition, it is advisable to inform yourself about changes in the legal provisions and the practice of our company.