Data Protection Statement

Privacy policy

We are delighted that you are visiting our website pintsch.net and are interested in our company.

We attach a great deal of importance to protecting your personal data, such as your date of birth, name, phone number, address, etc.

The purpose of this privacy policy is to inform you of how your personal data that we collect from you when you visit our website is processed. Our data protection practices comply with the legal regulations set down in the EU’s General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the duties to provide information arising from the GDPR. These can be found in the likes of Arts. 13 and 14 et seq. of the GDPR.

Controller

The controller according to Art. 4 (7) of the GDPR is the party that, alone or jointly with others, determines the purposes and means of personal data processing.

With regard to our website, the controller is:

PINTSCH GmbH
Hünxer Strasse 149
46537 Dinslaken
Germany
Email: info@pintsch.net
Tel.: +49 (0)2064 602-0
Fax: +49 (0)2064 602-266

Providing the website and creating log files

Each time our website is accessed, our system automatically records data and information from the accessing device (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and the version used;
(2) The accessing device’s operating system;
(3) The host name of the accessing computer;
(4) The accessing device’s IP address;
(5) The date and time of access;
(6) Websites and resources (images, files, other page contents) that were accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Message confirming whether access was successful;
(9) The amount of data transmitted

This data is stored in our system’s log files. This data is not stored together with personal data belonging to a specific user, so individual site visitors are not identified.

Legal basis for personal data processing

Art. 6 (1) (f) of the GDPR (legitimate interest). Our legitimate interest is to guarantee achievement of the purpose outlined below.

Purpose of data processing

Temporary (automated) data storage is necessary for a visit to a website to proceed to enable delivery of the website. Personal data is also stored and processed to maintain our website’s compatibility for all visitors where possible and to combat misuse and eliminate faults. To this end, it is necessary to log the accessing computer’s technical data, so that we can respond to display errors, attacks on our IT systems and/or functionality errors on our website as early as possible. Additionally, we also use the data to optimize the website and to ensure the general security of our IT systems.

Duration of storage

The above technical data is deleted as soon as it is no longer needed to guarantee the website’s compatibility for all visitors, but at the latest within three months of our website being accessed.

Opportunity for objection and erasure

You may object to processing at any time according to Art. 21 of the GDPR and request that your data be erased according to Art. 17 of the GDPR. You will find the rights that you are entitled to and information on how to assert them at the bottom of this privacy policy.

Statistical evaluation of visits to this website – web trackers

When this website or individual files on the website is / are accessed, we collect, process and store the following data: IP address, web page from which the file was retrieved, name of the file, the retrieval date and time, the data volume transmitted and the retrieval success notification (“web log”). We only use this access data in a non-personalized form with a view to continuously improving our website and for statistical purposes. We also use the following web trackers to evaluate visits to our website:

  • Google Analytics
    • Extent of personal data processing

We use the web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google Analytics”) on our website. In the context of web tracking, Google Analytics uses cookies, which are stored on your computer and enable analysis of the use of our website and your surfing behavior (“tracking”). We carry out this analysis based on the Google Analytics tracking service in order to continuously optimize our website and improve its availability. In the context of use of our website, data – such as your IP address and your user activities in particular – shall be transferred to Google Ireland Limited servers. We conduct this analysis based on Google’s tracking service so as to continuously improve our website and its availability. We also require web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information provided by the web tracker allows us to take effective counter-measures and protect the personal data we process against these cyber attacks. Google Analytics will anonymize your IP address before transmission if you enable IP anonymization within this website’s Google Analytics tracking code. This website uses a Google Analytics tracking code expanded to include the gat._anonymizeIp(); operator so as to enable only anonymized collection of IP addresses (“IP masking”).

    • Legal basis for personal data processing

According to Art. 6 (1) (a) of the GDPR, the legal basis for data processing is your consent in our notification banner concerning the use of cookies and web tracking (consent by means of a clear affirmative act or conduct).

    • Purpose of data processing

On our behalf, Google will use this information for the purpose of evaluating your visit to this website, compiling reports on website activities and providing us with other services relating to website and internet use. We also require web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information provided by the web tracker allows us to take effective counter-measures and protect the personal data we process against these cyber attacks.

    • Duration of storage

Google will store the data that is relevant to the provision of web tracking for as long as is necessary to render the booked web service. Data is collected and stored in an anonymized format. If references to persons do exist, the data will be deleted immediately provided that it is not subject to any statutory retention requirements. In any case, deletion will take place once the retention requirement has expired.

    • Opportunities for objection and erasure

You can prevent personal data (particularly your IP address) from being collected by and disclosed to Google and Google’s processing of this data by disabling the execution of script codes in your browser or by enabling your browser’s “Do Not Track” setting. Furthermore, you can prevent Google’s collection and processing of the data generated by the Google cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=en). You can find Google’s security and privacy policy at https://policies.google.com/privacy?hl=en.

Integration of external web services and data processing outside the EU

We use active contents from external providers (“web services”) on our website. When you access our website, these external providers may receive personal information about your visit to our website. Data may be processed outside the EU in this regard. You can prevent this from happening by installing an appropriate browser plugin or by disabling the execution of scripts in your browser. This can lead to functional restrictions on websites you visit.

We use the following external web services:

  • Google

A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to Google in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest lies in the error-free operation of our website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in Google’s privacy policy: https://policies.google.com/privacy

You can prevent Google from collecting and processing your data by disabling the execution of script codes in your browser or by installing a script blocker in your browser.

  • Google Fonts

A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google Fonts”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to Google Fonts in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest lies in the error-free operation of our website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in Google Fonts’ privacy policy: https://policies.google.com/privacy

You can prevent Google Fonts from collecting and processing your data by disabling the execution of script codes in your browser or by installing a script blocker in your browser.

  • Google Maps
    • What personal data is collected and to what extent is it processed?

We use the maps service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google Maps”) on our website. Google Maps is integrated on the website via the Google API to visualize location data and show it in the form of a map. Processing of the IP address by Google Maps is technically necessary to display the map. With regard to the other web services integrated using Google APIs, the rules set down in the relevant section of this privacy policy on Google APIs shall apply.

    • Legal basis for personal data processing

Art. 6 (f) of the GDPR (legitimate interest). Our legitimate interest is to be able to present the visualized location data to you in the manner normally used on the internet.

    • Purpose of data processing

Google will use the information obtained using Google Maps on our behalf to show you the map. Google Maps will allow you to find us faster and more precisely than with a simple, non-interactive map.

    • Duration of storage

Google will store the data that is relevant to Google Maps’ functioning for as long as is necessary to render the booked web service. Data is collected and stored in an anonymized format. If references to persons do exist, the data will be deleted immediately provided that it is not subject to any statutory retention requirements. In any case, deletion will take place once the retention requirement has expired.

    • Opportunity for objection and erasure

You can prevent personal data (particularly your IP address) from being collected by and disclosed to Google and Google’s processing of this data by disabling the execution of script codes in your browser, by installing a script blocker in your browser, or by enabling your browser’s “Do Not Track” setting. You can find Google’s Google security and privacy policy at https://policies.google.com/privacy.

    • Joint processing

We have concluded a joint processing agreement with Google with respect to Google Maps. The content can be found at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

  • Google APIs

A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google APIs”) is downloaded in our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to Google APIs in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest lies in the error-free operation of our website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in the Google APIs privacy policy: https://policies.google.com/privacy

You can prevent Google APIs from collecting and processing your data by disabling the execution of script codes in your browser or by installing a script blocker in your browser.

  • Gstatic

A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Gstatic”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to Gstatic in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest lies in the error-free operation of our website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in Gstatic’s privacy policy: https://policies.google.com/privacy

You can prevent Gstatic from collecting and processing your data by disabling the execution of script codes in your browser or by installing a script blocker in your browser.

  • YouTube

A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “You Tube”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to YouTube in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest lies in the error-free operation of our website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in YouTube’s privacy policy: https://policies.google.com/privacy

You can prevent YouTube from collecting and processing your data by disabling the execution of script codes in your browser or by installing a script blocker in your browser.

  • website-check.de

A web service provided by Website-Check GmbH, Beethovenstrasse 24, 66111 Saarbrücken, Germany (hereinafter referred to as “website-check.de”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to website-check.de in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest lies in the error-free operation of our website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in the website-check.de privacy policy: https://www.website-check.de/datenschutzerklaerung/

You can prevent website-check.de from collecting and processing your data by disabling the execution of script codes in your browser or by installing a script blocker in your browser.

  • Google reCAPTCHA

A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google reCAPTCHA”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to Google reCAPTCHA in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest lies in the error-free operation of our website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in Google reCAPTCHA’s privacy policy: https://policies.google.com/privacy

You can prevent Google reCAPTCHA from collecting and processing your data by disabling the execution of script codes in your browser or by installing a script blocker in your browser.

  • DoubleClick

A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “DoubleClick”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to DoubleClick in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest lies in the error-free operation of our website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in DoubleClick’s privacy policy: https://policies.google.com/privacy

You can prevent DoubleClick from collecting and processing your data by disabling the execution of script codes in your browser or by installing a script blocker in your browser.

  • Google Video

A web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google Video”) is downloaded on our website. We use this data to guarantee the full functionality of our website. Your browser may transfer personal data to Google Video in this regard. The legal basis for data processing is Art. 6 (1) (f) of the GDPR. The legitimate interest lies in the error-free operation of our website. The data is deleted as soon as the purpose of its collection has been fulfilled. You will find further information about how the transferred data is handled in the Google Video privacy policy: https://policies.google.com/privacy

You can prevent Google Video from collecting and processing your data by disabling the execution of script codes in your browser or by installing a script blocker in your browser.

Information about the use of cookies

Extent of personal data processing

We integrate and use cookies on various pages to enable certain website functions and integrate external web services. The “cookies” are small text files that your browser can store on your accessing device. These text files contain a characteristic character string that uniquely identifies the browser if you return to our website. The process of saving a cookie file is also known as “setting a cookie”. Cookies may be set both by the website and by external web services in this respect.

Legal basis for personal data processing

Art. 6 (1) (f) of the GDPR (legitimate interest) and Art. 6 (1) (a) or Art. (9) (2) (a) of the GDPR (consent).

The cookie table further on in this section shows which legal basis is relevant.

Generally speaking, in the case of cookies that are set based on a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated on it (technically necessary cookies). The cookies may increase the website’s user-friendliness and allow us to address you in a more personalized way. In this respect, we have struck a balance between your interests and ours.

We can only identify, analyze and track individual website users with the help of the cookie technology if the website visitors have consented to the use of cookies according to Art. 6 (1) (a) of the GDPR.

Purpose of data processing

The cookies are set by our website or the external web services to maintain our website’s full functionality, to improve its user-friendliness or to track the purpose specified by way of your consent. The cookie technology also enables us to identify individual users using pseudonyms, e.g. an individual or random ID, so we can offer more individual services. Details are listed in the table below.

Duration of storage

The cookies listed below are stored in your browser until you delete them or, in the case of session cookies, until the session is ended. Details are listed in the table below:

Cookie name Server Provider Purpose Legal basis Duration of storage Type
_gid pintsch.net Google Analytics This cookie assigns an ID to a user so that
the web tracker can summarize the user’s actions under this ID.
Consent Approx. 24 hours Analytics
_ga pintsch.net Google Analytics This cookie assigns an ID to a user so that
the web tracker can summarize the user’s actions under this ID.
Consent Approx. 24 months Analytics
_gat pintsch.net Google Analytics This cookie is used to throttle
the web tracker’s demand rate.
Consent Approx. 90 seconds Configuration
PHPSESSID pintsch.net Website operator Cookie required by applications based on the PHP language.
The cookie is stored during the session.
It is required to save certain website settings during the visit
to the website (session).
Technically necessary Session Session
wp-wpml_current_language pintsch.net Website operator This cookie allows us to save individual convenience settings
selected by you and keep them available for your current and
future visits to the site.
Consent Approx. 24 hours Configuration
remote_sid youtube.com You Tube This cookie allows us to save individual convenience settings
selected by you and keep them available for your current and
future visits to the site.
Consent Session Configuration

Opportunity to object, revocation of consent and erasure

If you so desire, you can adjust your browser settings to categorically prevent the setting of cookies. You can then decide on whether to accept cookies on a case-by-case basis, or categorically accept the setting of cookies. Cookies can be used for different purposes, e.g. to identify that your accessing device has previously connected to our website (permanent cookies) or to store your most recently viewed web pages (session cookies). If you have expressly given us your consent to process your personal data, you can revoke the same at any time. Please note that revocation of consent does not affect the lawfulness of processing carried out based on such consent up until the same is revoked.

Data security and data protection, communication by email

When it is collected, stored and processed, your personal data is protected by means of technical and organizational measures to ensure that it is inaccessible to third parties. Since we cannot guarantee complete data security on the transmission path to our IT systems during unencrypted communication by email, we advise sending highly confidential information using encrypted communication or by post.

Automatic email archiving

  • Extent of personal data processing

We would like to expressly point out that our email system has an automated archiving process. It digitally archives all incoming and outgoing emails in an audit-proof manner.

  • Legal basis for personal data processing

Art. 6 (1) (c) of the GDPR (legal obligation). The legal obligation is to comply with specifications set down in fiscal law and commercial law (e.g. Sections 146 and 147 of the German Tax Code, Sections 238 and 257 of the German Commercial Code).

  • Purpose of data processing

The purpose of archiving is to comply with specifications set down in fiscal law (e.g. Sections 146 and 147 of the German Tax Code – duty to store emails relevant under fiscal law) and commercial law (e.g. Sections 238 and 257 of the German Commercial Code – duty to archive business correspondence).

  • Duration of storage

Our email communication is stored until the retention requirements under fiscal and commercial law have expired. The storage period may be up to ten years.

  • Opportunity for objection and erasure

You may object to processing at any time according to Art. 21 of the GDPR and request that your data be erased according to Art. 17 of the GDPR. You will find the rights that you are entitled to and information on how to assert them at the bottom of this privacy policy.

  • Handling application documents

If you have any questions about our email archiving system, please contact our data protection officer. We would also like to point out that we only consider application documents in PDF format. Zipped (WinZip, WinRAR, 7Zip, etc.) files are filtered out by our security systems and are not delivered. We do not consider applications made in the Word file format or other file formats and will delete the same without reading them. Please note that it may be possible for third parties to open application documents sent in unencrypted format by email before they reach our IT systems. We assume that we may also answer unencrypted application emails in unencrypted format. If you would not like us to do so, please inform us to this effect in your application email.

Right of access and rectification requests – Erasure and restriction of data – Revocation of consent – Right to object

Right of access

You have the right to request confirmation as to whether we process your personal data. If we do, you have a right of access to the information specified in Art. 15 (1) of the GDPR, provided that the rights and freedoms of others are not adversely affected (cf. Art. 15 (4) of the GDPR). We are also happy to provide you with a copy of the data.

Right to rectification

According to Art. 16 of the GDPR, you have the right to have incorrectly stored personal data (such as your address, name, etc.) corrected by us at any time. You can also request that the data we store be completed at any time. Adjustment to this effect shall be performed without delay.

Right to erasure

According to Art. 17 (1) of the GDPR, you have the right to request that we erase the personal data collected about you if

  • the data is either no longer needed;
  • the legal basis of processing is no longer applicable due to you revoking your consent;
  • you have objected to processing and there are no legitimate grounds for processing;
  • your data is being processed unlawfully;
  • a legal obligation requires this or collection according to Art. 8 (1) of the GDPR has taken place.

According to Art. 17 (3) of the GDPR, the right does not exist if

  • processing is necessary to exercise the right to freedom of expression and information;
  • your data was collected based on a legal obligation;
  • processing is necessary for reasons of public interest;
  • the data is necessary to establish, exercise or defend legal claims.

Right to restriction of processing

According to Art. 18 (1) of the GDPR, you have the right to request on a case-by-case basis that processing of your personal data be restricted.

This applies if

  • you dispute the correctness of the personal data;
  • processing is unlawful and you do not consent to erasure of the data;
  • the data is no longer required for the purpose for which it is being processed, but the data collected is being used to assert, exercise or defend legal claims;
  • an objection has been made against processing according to Art. 21 (1) of the GDPR and it is still unclear which interests take precedence.

Right of revocation

If you have given us express consent to process your personal data (Art. 6 (1) (a) of the GDPR or Art. 9 (2) (a) of the GDPR), you can revoke this consent at any time. Please note that revocation of consent does not affect the lawfulness of processing carried out based on such consent up until the same is revoked.

Right to objection

According to Art. 21 of the GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected based on Art. 6 (1) (f) (in the context of a legitimate interest). You are only entitled to this right if special circumstances preclude storage and processing.

How do I exercise my rights?

You can exercise your rights at any time by using the contact details provided below:

PINTSCH GmbH
Hünxer Strasse 149
46537 Dinslaken
Germany
Email: info@pintsch.net
Tel.: +49 (0)2064 602-0
Fax: +49 (0)2064 602-266

Right to data portability

According to Art. 20 of the GDPR, you are entitled to have personal data concerning you transferred. We provide the data in a structured, commonly used and machine-readable format. The data can be sent either to yourself or to a controller named by you.

We shall provide you with the following data on request according to Art. 20 (1) of the GDPR:

  • Data collected based on express consent according to Art. 6 (1) (a) of the GDPR or Art. 9 (2) (a) of the GDPR;
  • Data that we have received from you according to Art. 6 (1) (b) of the GDPR in the context of existing contracts;
  • Data processed in the context of an automated procedure.

We shall transfer the personal data directly to a controller of your choosing insofar as doing so is technically feasible. Please note that we are not allowed to transfer data that interferes with the rights and freedoms of others according to Art. 20 (4) of the GDPR.

Right to lodge a complaint with the supervisory authority according to Art. 77 (1) of the GDPR

If you suspect that your data is being processed unlawfully on our website, you can naturally obtain judicial clarification of the issue at any time. Every other legal option is open to you too. Regardless of this, you have the option of contacting a supervisory authority according to Art. 77 (1) of the GDPR. You have a right to lodge a complaint according to Art. 77 of the GDPR in the EU member state of your place of residence, your workplace and/or the place of the suspected violation, i.e. you can choose the supervisory authority you wish to contact from the aforementioned locations. The supervisory authority with whom the complaint was lodged then informs you of the status and results of your petition, including the possibility of a judicial remedy according to Art. 78 of the GDPR.

Created by:

© IT-Recht-Kanzlei DURY – www.dury.de

© Website-Check GmbH – www.website-check.de