Déclaration de confidentialité

Contact information according to Article 4 (7) GDPR

CemeCon AG
Dr. Oliver Lemmer
Adenauerstr. 20 A4
52146 Würselen

Phone: +49 2405 44 70 100
Fax: +49 2405 44 70 399
info@cemecon.de

Data Protection Officer

VUV Beratungs- und Service GmbH
Data protection officer of CemeCon AG
Theaterstr. 55
52062 Aachen

Phone: +49 241 47433 21
cemecon@unser-datenschutz.de

Information on the collection of personal data

(1) In the following, we inform you about the collection of personal data when using our website and the pages of our web catalogue . Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

(2) The responsible party pursuant to Art. 4 (7) EU General Data Protection Regulation (DS-GVO) is CemeCon AG, Adenauerstr. 20 A4, 52146 Würselen, +49 2405 44 70 100, info@cemecon.de, Germany (see also our imprint). 

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations.

(4) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.
 

Hosting

External hosting
This website as well as the pages of the web catalogue are hosted by external service providers (hosters). The personal data collected on this website and on the pages of the web catalogue are stored on the servers of the hosters. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

The hosters are used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Our hosters will only process your data to the extent necessary to fulfil their performance obligations and follow our instructions in relation to that data. We use the following hosters:

For the web catalog:
PlusServer GmbH
Hohenzollernring 72, 50672 Cologne, Germany

For the website:
mecca neue medien GmbH & Co KG
Roonstraße 7, 52070 Aachen

Job processing
We have concluded contracts on order processing (AVV) with the above-mentioned providers. This is a contract required by data protection law, which ensures that the latter only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
 

Your rights

(1) You have the following rights with respect to personal data concerning you:

  • Once you have given your consent, you may revoke it at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future (see Article 7 (3) GDPR);
  • Information about personal data processed by us (pursuant to Art. 15 GDPR). In particular, information regarding the purposes of processing, category of personal data, categories of recipients to whom your data have been or will be disclosed, planned storage period;
  • Correction of inaccurate or incomplete personal data stored by us (in accordance with Art. 16 GDPR);
  • Erasure of your personal data stored by us, but only if the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims (pursuant to Art. 17 GDPR);
  • Restriction of the processing of your personal data if the legal requirements are met (see Art. 18 GDPR);
  • To receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller in accordance with the regulation in Art. 20 GDPR;
  • You can complain to a supervisory authority, such as the supervisory authority of your usual place of residence and/or workplace or our registered office (see Art. 77 GDPR). For North Rhine-Westphalia and our company, this is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Tel.: 0211/38424-0, Fax: 0211/38424-10, e-mail: 
    poststelle@ldi.nrw.de
  • Right to object to the collection of data in specific cases and to direct marketing (Art. 21 GDPR): If the data processing is carried out on the basis of Art. 6 (1) lit. e or f GDPR, they have the right to object to the processing of their personal data at any time for reasons arising from their particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (objection under Article 21(1) of the GDPR).
  • If their personal data are processed for the purpose of direct marketing, they have the right to object at any time to the processing of personal data concerning them for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If they object, their personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 (2) GDPR).

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

(3) Data processed by us shall be deleted or restricted in its processing in accordance with Articles 17 and 18 GDPR. The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If a deletion is not possible for legal reasons, a restriction will take place, which means that a use other than for the mandatory storage obligation is excluded.

(4) We do not transfer your personal data to third parties for purposes other than those listed by us. We will only disclose your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR,
  • this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b GDPR for the processing of contractual relationships with you,
  • in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c GDPR, as well as
  • the disclosure is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

 

Collection of personal data when visiting our website and the pages of our web catalogue

(1) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):

  • IP address
  • Date and time of the request
  • Time zone difference from Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access status/HTTP status code
  • Data volume transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and through which certain information flows to the body that sets the cookie (in this case by us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall.

(3) Use of cookies

a) This website uses cookies. There are the following types of cookies, the scope and functionality of which are explained below:

  • Transient cookies, which are also used here (b)
  • Persistent cookies, which are only used when you use the login function (see c).

b) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.

(4) We do not use any statistical evaluation of our website usage by external services.

Server log files
The providers of the pages of this website and the pages of our web catalogue automatically collect and store information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • operating system used
  • referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of his website - for this purpose, the server log files must be collected.

Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.

Inquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your enquiry including all personal data resulting from it (name, enquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) if this has been requested; the consent can be revoked at any time.

The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
 

Use of third-party offers or content, analysis tools, advertising and plugins

Google Web Fonts (local hosting)
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. A connection to Google servers does not take place.

You can find more information about Google Web Fonts at

https://developers.google.com/fonts/faq and

in Google's privacy policy:

https://policies.google.com/privacy?hl=de.

This website uses, Google Maps, Google reCAPTCHA, YouTube and Matomo.

Within the scope of our website offer, content offers of third parties are used on the basis of our legitimate interests (here in particular the interest in the optimization and economic operation of our online offer, Art. 6 para. 1 lit. f. GDPR), content offers from third parties are used to integrate their content and services, such as maps or fonts. In order for this to be possible, it is mandatory that these third parties receive the IP address of the respective user of our website. Without transmission of the IP address, it is not possible to provide content for the respective user, so this is a required date.
This is how we use third party content:

  • Google Maps - In our offers, the maps of the service "Google Maps" (provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) are integrated via iFrame. The data processed during the display may include, in particular, IP addresses and location data of the users of our website, which, however, are not collected without consent (generally configured as part of the settings of their mobile devices or requested via the browser). This data may be processed in the USA. Privacy policy of Google LLC: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
  • Google reCAPTCHA - We use Google's reCaptcha service to help determine whether a human or computer is making a particular entry on our contact or newsletter form. Google uses the following data to check whether you are a human or a computer: IP address of the terminal device used, the website that you visit with us and on which the captcha is embedded, the date and duration of the visit, the recognition data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks that require you to identify images. The legal basis for the described data processing is Art. 6 (1) (f) of the General Data Protection Regulation. There is a legitimate interest on our side in this data processing to ensure the security of our website and to protect us from automated entries (attacks).
  • Video Plugins (YouTube)
    We integrate YouTube videos on our website. This service is provided by Google ("Provider"). Please also note our general information on the use of Google services.
    For videos from YouTube that are embedded on our website, the extended privacy setting is activated. This means that no information about website visitors is collected and stored on YouTube unless they play the video. The integration of the videos serves to protect our predominantly legitimate interests in the optimal marketing of our offer in accordance with Art. 6 para. 1 p. 1 lit. f DS-GVO.
    When you play a video embedded on our website, YouTube collects and stores your data. Therefore, before playing the video, please inform yourself about the purpose and scope of the data collection there and the further processing and use of the data by Google as the provider of the YouTube service, as well as about your rights and setting options for protecting your privacy, which you can find out about in Google's privacy policy http://www.google.com/intl/de/+/policy/+1button.html.
    The start of the playback of an embedded YouTube video takes place through the active action of the website visitor and is interpreted by us as consent (Art. 6 para. 1 lit. a DS-GVO) to the transmission of data to YouTube (Google).
    When a YouTube video is played, the IP address and other login data of the website visitor are transmitted to YouTube and thus, in particular, information about which of our websites the visitor has visited.
    However, this information cannot be linked to the respective website visitor unless the visitor has logged in to YouTube or another Google service (e.g. Google+) before viewing the page or is permanently logged in.
    When playback of an embedded video is started by clicking on it, YouTube only stores cookies on the website visitor's device via enhanced privacy mode, which do not contain any personally identifiable information unless the website visitor is currently logged in to a Google service. These cookies can be prevented through appropriate browser settings and extensions.
  • Matomo
    This website uses the open source web analytics service Matomo. With the help of Matomo, we are able to collect and analyze data about the use of our website by website visitors. This allows us to find out, among other things, when which page views were made and from which region they came. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.). The use of this analysis tool is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time. IP anonymization We use IP anonymization for the analysis with Matomo. This means that your IP address is shortened before analysis so that it can no longer be clearly assigned to you. Cookieless analysis We have configured Matomo so that Matomo does not store cookies in your browser. 9 / 13 Hosting We host Matomo exclusively on our own servers, so that all analysis data remains with us and is not passed on.

 

Newsletter

(1) With your consent, you can subscribe to our information service, with which we inform you about our current interesting developments.

(2) For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration, we will send you an email to the email address you provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, via this form on the website, by e-mail to informed@cemecon.de or by sending a message to the contact details given in the imprint.  Your data will be deleted within 1 month after termination of the newsletter receipt, provided that the deletion does not conflict with any legal retention obligations. By sending the data you entered, you consent to the data processing and confirm our privacy policy.

(5) In order to be able to optimise the newsletter for you, data on the opening of the mailings and clicks on links within the mailings are stored.
 

Use of CleverReach

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co KG, Schafjückenweg 2, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organised and analysed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on CleverReach's servers in Germany or Ireland.
Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, we can analyse how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. For more information on data analysis through CleverReach newsletters, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
If you do not agree with an analysis by CleverReach, please unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message. Furthermore, you can also unsubscribe directly on the website.
The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.
For more details, please see CleverReach's privacy policy at:
https://www.cleverreach.com/de/datenschutz/.

Conclusion of a contract on commissioned data processing
We have concluded an order data processing contract with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.
 

Data security

Our website uses the SSL or TLS procedure (Secure Socket Layer or Transport Layer Security, usually with 256-bit encryption) to secure communication. We use appropriate technical and organizational security measures to protect your data against manipulation, loss, destruction or unauthorized access by third parties.
 

Storage period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.
 

Actuality and change of this privacy policy

This data protection declaration is currently valid and has the status September 2022. It 
may become necessary to change this data protection declaration, for example in the event of changes to legal or official requirements. You can access and print out 
the current data protection declaration at any time on our website, for example at www.cemecon.de/de/datenschutz.