Privacy Policy

1. Introduction

The following information is intended to give you as the 'data subject' an overview of the processing of your personal data by us and your rights under data protection laws. It is always possible to use our website without entering personal data. However, if you wish to make use of special services of our company via our website, the processing of personal data may be necessary. Generally, we will obtain your consent if the processing of personal data is necessary and there is no legal basis for such processing.

Personal data, such as your name, address or e-mail address, is always processed in line with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to DENIOS SE. The purpose of this privacy policy is to inform you about the scope and purpose of the personal data we collect, use and process.

As the controller, we have implemented numerous technical and organisational measures to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, since Internet-based data transmissions generally have security gaps, absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, such as by telephone or post.

2. Verantwortlicher

The controller within the meaning of the GDPR is always:

DENIOS SE, Dehmer Straße 54-66, 32549 Bad Oeynhausen, Telefon: 05731 753-0, Fax: 05731 753-199, E-Mail: info@denios.de

In certain cases, for sales and advertising purposes, we also use our domestic and foreign subsidiaries to respond to your enquiries and orders. You can find an overview of our subsidiaries at https://www.denios.de/unternehmen/denios-entdecken/denios-weltweit/.

3. Data Protection Officer

You can reach the Data Protection Officer as follows: datenschutz-denios@audatis.de
You can contact our Data Protection Officer directly at any time with any questions or suggestions regarding data protection.

4. Definitions

This privacy policy is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). We strive to make our privacy policy easy to read and understand for the public and for our customers and business partners. To ensure this, we will now start by explaining the terminology used.

In this privacy policy, we use the following terms, among others:

4.1 Personenbezogene Daten

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by being linked to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

4.2 Data subject

Data subject is any identified or identifiable natural person whose personal data is processed by the controller (our company).

4.3 Processing

Processing is any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

4.4 Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting its future processing.

4.5 Profiling

Profiling is any form of automated processing of personal data comprising the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

4.6 Pseudonymisation

Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not linked to an identified or identifiable natural person.

4.7 Processor

Processor is a natural person or legal entity, public authority, agency or other body which processes personal data on behalf of the controller.

4.8 Recipient

Recipient is a natural person or legal entity, public authority, agency or another body to which the personal data is disclosed, whether a third party is involved or not. However, authorities that may receive personal data during a specific investigation mandate under Union law or the law of the Member States are not considered recipients.

4.9 Third party

Third party is a natural person or legal entity, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

4.10 Consent

Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or other clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

5. Legal basis of processing

Art. 6 (1) (a) GDPR (in conjunction with Sec. 15 (3) TMG [German Immediate Act]) serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If processing personal data is necessary to fulfil a contract to which you are a party, as is the case with processing operations needed for the delivery of goods or the provision of another service or consideration, for example, the processing is based on Art. 6 (1) (b) GDPR. The same applies to such processing operations required for carrying out pre-contractual measures, such as in cases of enquiries regarding our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as for fulfilling tax obligations, the processing is based on Art. 6 (1) (c) GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. For example, this would be the case if a visitor were injured in our company and their name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. The processing would then be based on Art. 6 (1) (d) GDPR.

Ultimately, processing operations could be based on Art. 6 (1) (f) GDPR. This legal basis is used for processing operations which are not covered by any of the aforementioned legal bases if processing is necessary for safeguarding the legitimate interests of our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by European legislation. The view taken in this respect is that legitimate interests could be assumed if you are a customer of our company (Recital 47 Sentence 2 GDPR).

6. Übermittlung von Daten an Dritte

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

1. you have given your express consent to this according to Art. 6 (1) (a) GDPR,

2. its disclosure is permitted according to Art. 6 (1) (f) GDPR to protect our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

3. there is a legal obligation for disclosure according to Art. 6 (1) (c) GDPR and

4. this is legally permissible and necessary for processing contractual relationships with you according to Art. 6 (1) (b) GDPR.

Since DENIOS is a globally active company, it may be necessary to forward your personal data to local subsidiaries or sales and business partners whose registered office may also be located outside the European Economic Area in order to better process your request or to safeguard our legitimate interests.

Your personal data will be transferred to third countries on the basis of the standard contractual clauses if there is no adequacy decision by the European Commission for the third country in question.

You can retrieve the standard contractual clauses at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=de.

An overview of all of the European Commission's adequacy decisions can be found at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de.

7. Technology

7.1 SSL/TLS-Verschlüsselung

This page uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact enquiries that you send to us as the operator. You can recognise an encrypted connection by the fact that the address line of the browser contains 'https://' instead of 'http://' and by the lock symbol in your browser line.

We use this technology to protect your transmitted data.

7.2 Data collection when visiting the website

If you only use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (in server log files). Our website collects a range of general data and information each time you or an automated system accesses a page. This general data and information is stored in the server log files. The following can be collected:

1. browser types and versions used,

2. the operating system used by the accessing system,

3. the website from which an accessing system reaches our website (called referrer),

4. the sub-websites that are accessed via an accessing system on our website,

5. the date and time of access to the website,

6. an Internet Protocol address (IP address),

7. the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about your identity. Instead, this information is required in order to

1. deliver the content of our website correctly,

2. optimise the content of our website and the advertising for it,

3. ensure the long-term functionality of our IT systems and the technology of our website and

4. provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

This data and information collected is therefore evaluated by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data processed by us. The data of the server log files is stored separately from all personal data provided by a data subject.

The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the purposes listed above for the date

8. Cookies

8.1 General information on cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.

Stored in the cookie is the information resulting in each instance in connection with the specific end device used. This does not mean that we will gain direct knowledge of your identity, however.

On the one hand, cookies are employed to make the use of our website more convenient for you. For example, we use session cookies to verify whether you have already visited individual pages of our website. They are automatically deleted after you leave our site.

In addition, we optimise user-friendliness through temporary cookies, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it will automatically recognise that you have visited us before and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we employ cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These cookies enable us to automatically recognise that you have already visited our website when you return. These cookies are automatically deleted after a defined period of time.

8.2 Legal basis for the use of cookies

The data processed by cookies required for the proper functioning of the website is necessary for safeguarding our legitimate interests and those of third parties in accordance with Art. 6 (1) (f) GDPR.

Your personal data is processed by our consent cookie (OneTrust) in order to map and prove your consent to the delivery of technically unnecessary cookies and thus for the purpose of compliance with applicable legal provisions pursuant to Art. 6 (1) (c) GDPR.

For all other cookies, you have given your consent to this via our opt-in cookie banner within the meaning of Art. 6 (1) (a) GDPR.

9. Web analysis

9.1 econda

On this website, we have integrated components of econda, a web analysis service. Web analysis is the collection, collation and evaluation of data on the behaviour of website visitors. A web analysis service collects data regarding the website from which a data subject came to a website (called the referrer), which subpages of the website were accessed, how often and for how long a subpage was viewed, etc. Web analysis is mainly used to optimise a website and to analyse the costs and benefits of Internet advertising.

The operating company of econda is econda GmbH, Zimmerstr. 6, 76137 Karlsruhe, Germany.

Econda places a cookie on your IT system. Each time you access one of the individual pages of this website that is operated by us and on which an econda component has been integrated, the web browser on your IT system is automatically prompted by the respective econda component to transmit data to econda for marketing and optimisation purposes. During this technical process, econda acquires knowledge of data that is subsequently applied to create pseudonymised user profiles. The user profiles obtained in this way are used to analyse your behaviour and are evaluated with the aim of improving and optimising our website. The data collected via the econda component will not be used to identify you without first obtaining your separate and express consent. This data is not merged with personal data or with other data containing the same pseudonym.

You can prevent our website from setting cookies at any time through a corresponding Internet browser setting, thereby permanently objecting to the setting of cookies. This Internet browser setting would also prevent econda from setting a cookie on your IT system. In addition, cookies already set by econda can be deleted at any time via an Internet browser or other software programmes.

You also have the option of objecting to and preventing the collection of data generated by the econda cookie relating to the use of this website and the processing of this data by econda. To do this, you must press the send button under the link https://www.econda.de/econda/unternehmen/datenschutz/widerspruchscookie/ in order to set the opt-out cookie. The opt-out cookie set with the objection is stored on your IT system. If the cookies on your IT system are ever deleted after an objection, you will need to call up the link again and set a new opt-out cookie.

If you do set the opt-out cookie, however, it is possible that you will no longer be able to use our website to its full extent.

You can also prevent cookies from being stored by setting your web browser accordingly. You can also prevent personal data from being stored and transmitted by deactivating Java Script in your web browser or installing a Java Script blocker (e.g., https://noscript.net or https://www.ghostery.com). Please note that such measures may result in not all functions of our website being available.

Processing operations by econda are only carried out if express consent pursuant to Art. 6 (1) (a) GDPR is given via our cookie banner.

The applicable data protection provisions of econda may be viewed at https://www.econda.de/econda/unternehmen/datenschutz/datenschutzerklaerung/.

9.2 Einsatz von Google Produkten: Google Analytics

On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited (https://www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter Google). In this context, pseudonymised usage profiles are compiled and cookies are used (see Cookies). The information generated by the cookie regarding your use of this website, such as

1. browser type/version,

2. operating system used,

3. referrer URL (previously visited web page),

4. host name of the accessing computer (IP address),

5. time of the server request,

, is transferred to a Google server in the USA and stored there. This information is used to evaluate your use of this website, to compile reports on website activity, to perform further services linked to website and Internet use for market research purposes and to tailor the design of this website. This information may also be transferred to third parties if legally required or insofar as third parties process this data on behalf of Google. Under no circumstances will your IP address be associated with any other data by Google. IP addresses are anonymised so that it is not possible to link them to individuals (IP masking).

You may refuse to allow cookies to be installed by selecting the appropriate settings on your browser; however, please note that this may limit your access to some of the features of this website.

These processing operations are only carried out if express consent pursuant to Art. 6 (1) (a) GDPR is given via our cookie banner.

You can also prevent the data generated by the cookie regarding your use of the website (including your IP address) from being sent to and processed by Google by downloading and installing this browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

Alternatively, particularly if you are using a browser on a mobile end device, you may also prevent Google Analytics from collecting data by clicking on the following link: Deactivate Google Analytics. This stores an opt-out cookie on your device that will prevent the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser – and only for our website. If you delete the cookies stored for this browser, you will need to reset the opt-out cookie.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics help centre, for example: (https://support.google.com/analytics/answer/6004245?hl=de).

10. Your rights as a data subject

10.1 Right to confirmation

You have the right to request confirmation from us regarding whether personal data concerning you is being processed.

10.2 Right to information, Art. 15 GDPR

You have the right to receive free information from us at any time about the personal data stored about you as well as a copy of this data in accordance with the statutory provisions.

10.3 Right to rectification, Art. 16 GDPR

You have the right to request to have inaccurate personal data concerning you rectified. Moreover, you have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

10.4 Erasure, Art. 17 GDPR

You have the right to demand that we erase the personal data concerning you without undue delay, provided that one of the reasons specified by law applies and insofar as processing or storing it is not necessary.

10.5 Restriction of processing, Art. 18 GDPR

You have the right to demand that we restrict processing if one of the legal requirements is met.

10.6 Data portability, Art. 20 GDPR

You have the right to receive the personal data concerning you – which you have provided to us – in a structured, conventional and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us – to whom the personal data has been provided – where the processing is based on consent pursuant to point (a) of Article 6 (1) GDPR or point (a) of Article 9 (2) GDPR or on a contract pursuant to point (b) of Article 6 (1) GDPR and where the processing is conducted by automated means unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

10.7 Objection, Art. 21 GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Article 6 (1) (e) (data processing in the public interest) or (f) (data processing on the basis of a balancing of interests) GDPR.

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling justification for the processing which override your interests, rights and freedoms or if the processing serves the purpose of establishing, exercising or defending against legal claims.

In individual cases, we process personal data for direct marketing. You can object to the processing of your personal data for the purpose of such advertising at any time. This also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process the personal data to this end.

With regard to the use of information society services, notwithstanding Directive 2002/58/EC, you are free to exercise your right to object by automated means for which technical specifications are used.

10.8 Revocation of consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time with future effect.

10.9 Complaint to a supervisory authority

You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection.

11. Routine storage, erasure and blocking of personal data

We process and store your personal data only for the period of time necessary to achieve the purpose of storing it or if this is allowed for by the legal provisions to which our company is subject.

If the purpose of storing the data no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or erased in accordance with the statutory provisions.

12. Weitere Informationen

Further information on the processing of your personal data can be obtained from our head office and our Data Protection Officer.

13. Additional data protection information

As a company, we not only process personal data on our website, but also in many other processes. If you require additional information that you cannot find here, please contact our Data Protection Officer in all confidence.

14. Validity and revision of the privacy policy

This privacy policy is currently valid and was last revised in June 2022.

It may become necessary to revise this privacy policy as a result of the further development of our website and services or due to changes in legal or official requirements.