Introduction and general information
Thank you for your interest in our website. Below you will find information on the handling of your data collected through your use of our website. Your data will be processed in accordance with the statutory data protection regulations.
In the following, we will inform you in more detail about the processing of your personal data and your rights as a data subject:
I. Name and address of the controller within the meaning of the GDPR
II. Contact details of the data protection officer
III. General information on data processing
IV. Server log files as part of the provision of the website
V. Use of "own" cookies
VI. Website analysis tools
VII. Newsletter
VIII. Contact form and email contacts
IX. CWS Assistant (chatbot)
X. CWS customer portal
XI. Integration of YouTube videos
XII. Integration of Google Maps
XIII. Integration of Google Fonts
XIV. Online presence in social media
XV. Data security
XVI. Rights of data subjects
XVII. Legal obligations
XVIII. Automated decision making
XIX. Subject to change
I. Name and address of the controller within the meaning of the GDPR
The controller within the meaning of the General Data Protection Regulation (hereinafter "GDPR") and other national data protection laws of the member states as well as other data protection regulations is
CWS International GmbH
Franz-Haniel-Platz 1b
D-47119 Duisburg
Telephone number: +49 6103 309-0
Email: info@cws.com
Website: https://www.cws.com
II. Contact details of the data protection officer
You can reach the data protection officer of the controller as follows
CWS International GmbH
Data Protection Officer
Franz-Haniel-Platz 1b
D-47119 Duisburg
Germany
Telephone number: +49 6103 309-0
Email: datenschutzbeauftragter@cws.com
III.General information on data processing
CWS offers are aimed exclusively at B2B customers and are not sold to consumers
1. Definitions
Our privacy policy should be simple and understandable for everyone. As a rule, the official terms of the GDPR are used in this privacy policy. The official definitions are explained in Art. 4 GDPR.
2. Scope of the processing of personal data
We only process our users' personal data insofar as this is necessary to provide a functional website and our content and services. The processing of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
3. Legal basis for the processing of personal data
a) Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
b) When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
c) Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
d) In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
e) If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
4. Data erasure and storage duration
The personal data of the data subject will be routinely deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject (e.g. under commercial law and tax law).
After the respective period has expired, the corresponding data will be routinely deleted. If data is required for contract fulfillment or contract initiation or if we have a legitimate interest in further storage, the data will be deleted if it is no longer required for these purposes or if you have exercised your right of revocation or objection.
5. Accessing and storing information in terminal equipment
By using our website, information (e.g. IP address) may be accessed or information (e.g. cookies) may be stored in your end devices. This access or storage may involve further processing of personal data within the meaning of the GDPR.
In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 (1) sentence 1, (2) no. 2 TDDDG.
In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) TDDDG with your consent in accordance with Art. 6 (1) (a) GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.
Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.
6. Webhosting
We host our website with iquer. The provider is iquer.net GmbH & Co KG, Klingenderstr. 5, 33100 Paderborn (hereinafter referred to as iquer).
Details can be found in iquer's privacy policy: https://www.iquer.net/datenschutz/.
The use of iquer is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers' data and not to pass it on to third parties.
IV. Server log files as part of the provision of the website
When you visit our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
Date and time of the request
Name of the requested file
Page from which the file was requested
Access status
Web browser and operating system used
(Complete) IP address of the requesting computer
Amount of data transferred
We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The log files are used to evaluate system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. After 7 days at the latest, the data is anonymized by shortening the IP address at domain level so that it is no longer possible to establish a reference to the individual user.
This data is not stored together with other personal data of the user.
V. Use of "own" cookies
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use the following types of cookies, the scope and function of which are explained below:
a) Technically necessary cookies
We use these cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The following data is stored and transmitted in these cookies:
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
These cookies are required for the following applications:
The processing of data through the use of strictly necessary cookies is based on a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the information on the specific data processing.
b) Technically unnecessary cookies (analysis cookies)
We also use cookies on our website that enable an analysis of your surfing behavior.
The following data can be transmitted in this way:
Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis of cookies, we learn how the website is used and can thus constantly optimize our offer.
The user data collected in this way is pseudonymized by technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the user.
When accessing our website, users are informed by an info banner about the use of cookies for analysis purposes and referred to this data protection information. In this context, there is also a reference to how the storage of cookies can be prevented in the browser settings.
The processing of personal data through the use of other cookies is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time for the future. If such cookies are used for analysis and optimization purposes, we will inform you about this separately in the context of this data protection declaration and obtain consent in accordance with Art. 6 Para. 1 lit. a GDPR.
2. Purpose of data processing
a) For technically necessary cookies
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
b) For cookies that are not technically necessary
Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.
3. Browser settings
Cookies are stored on your computer and transmitted from it to our website. As a user, you therefore have full control over the use of cookies. If the cookies used are so-called transient cookies, they are deleted after logging out or closing the browser. Persistent cookies are automatically deleted from your computer after a specified period, which may vary depending on the cookie. However, you can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can also be deleted at any time. Deletion can also be automated, as described.
You can set your browser so that you:
The cookie settings can be managed under the following links for the respective browsers:
You can also manage cookies from many companies and functions that are used for advertising individually. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called "do-not-track function". If this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be "tracked" for the purpose of behavior-based advertising and the like.
Information and instructions on how to edit this function can be found under the following links, depending on your browser provider:
You can also prevent scripts from loading by default. "NoScript" only allows the execution of JavaScripts, Java and other plug-ins on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that the functionality of our website may be restricted if cookies are deactivated.
4. Change cookie settings
You can revoke or change your cookie settings at any time. To do this, call up the cookie settings again using our integrated thumbprint. You can find this at any time at the bottom of the website.
VI. Website analysis tools
The following analysis tools are used on our website:
1. Google Ads
We use "Google Ads" on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). We use Google Ads for marketing and optimization purposes, in particular to display ads that are relevant and interesting to you.
If you have given us your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we can use Google Ads to draw attention to our attractive offers with the help of advertising material on external websites. This allows us to determine how successful individual advertising measures are.
These advertisements are delivered by Google via so-called "AdServers". We use so-called AdServer cookies for this purpose, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured.
If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies generally lose their validity after 30 days. They are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies enable Google to recognize your web browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. To the best of our knowledge, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out your IP address and store it.
As it is possible for Google to transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 (1) GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on the use of data by Google, on setting and objection options and on data protection can be found on the following Google websites:
Privacy policy: https://policies.google.com/privacy?hl=de&gl=de
Google website statistics: https://services.google.com/sitestats/de.html
You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. It is also possible to prevent the storage of cookies by setting your web browser to block cookies from the domain "www.googleadservices.com" (https://www.google.de/settings/ads). We would like to point out that this setting will be deleted if you delete your cookies. You can also deactivate interest-based ads via the link http://optout.aboutads.info. Please note that this setting will also be deleted if you delete your cookies.
2. Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. The European headquarters is Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. The terms of use are available at https://www.google.de/analytics/terms/de.html, the overview of data protection is available at https://www.google.com/analytics/learn/privacy.html?hl=de and the privacy policy is available at https://policies.google.com/privacy?hl=de.
a) Description and scope of data processing
We use Google Analytics to analyze the use of our website. Google Analytics uses cookies, which are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google Inc. server in the USA and stored there.
This is the following information:
However, if IP anonymization is activated on this website, your IP address will be shortened by Google Inc. beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. IP addresses are further processed in abbreviated form so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it will be excluded immediately and the personal data will be deleted immediately.
Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google Inc.
We have concluded an order processing contract with the service provider in which we oblige it to protect our customers' data and not to pass it on to third parties.
As personal data may be transferred by Google to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
The terms of use of Google Analytics and information on data protection can be accessed via the following links:
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Data at user and event level that is linked to cookies, user identifiers (e.g. user ID) and advertising IDs (e.g. DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) is deleted no later than 14 months after it is collected.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de.
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics. You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
3. Google Photos
This website uses "Google Photos", a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: "Google"). Google Photos enables us to integrate and display image galleries on our website. The images are loaded by a server call, usually a Google server in the USA. This tells the server which page of our website you have visited. The IP address of the browser of the visitor's end device is also stored by Google.
We use Google Photos for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of the consent you have given. This consent can be revoked at any time with effect for the future.
As it is possible for Google to transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 (1) GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on data protection can be found in Google's privacy policy: http://www.google.de/intl/de/policies/privacy
4. Google Tag Manager
This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and only the user's IP address is transmitted to Google to establish a connection. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it will remain in place for all tracking tags if they are implemented with Google Tag Manager.
We use Google Tag Manager on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. .
As it is possible for Google to transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 (1) GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
5. LinkedIn Analytics / LinkedIn Insight
We use the conversion tracking technology and the retargeting function of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland on our website. This enables us to display personalized ads on LinkedIn to visitors to our website. For this purpose, a cookie, LinkedIn Insight Tag, is set in your browser with a validity of 120 days, which enables LinkedIn to recognize you if you visit this website and are logged into your LinkedIn account at the same time. LinkedIn uses this data to create anonymous reports on the performance of advertisements and information on website interaction. The information generated by the cookie is usually transferred to a server in the USA and stored there
The legal basis for the processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
As personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
You can deactivate LinkedIn Insight conversion tracking and interest-based personalized advertising by opting out at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further information on data protection at LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy.
6. Meta Pixel
We use "Meta Pixel" on our website, a service provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter referred to as: "Meta/Facebook").
If you have given us your consent in accordance with Art. 6 para. 1 lit. a GDPR, we use meta pixels for marketing and optimization purposes, in particular to place relevant and interesting ads for you on Facebook and thus improve our offer, make it more interesting for you as a user and avoid annoying ads.
Meta Pixel enables Meta to display our ads on Facebook, so-called "Facebook ads", only to those Facebook users who have visited our website, in particular those who have shown an interest in our online offering. In this case, Meta Pixel also makes it possible to check whether a user was redirected to our website after clicking on our Facebook ads. Among other things, Meta Pixel uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device. If you are logged in to Facebook with your user account, your visit to our website will be noted in your user account. The data collected about you is anonymous to us and does not allow us to draw any conclusions about the identity of the user. However, this data can be linked by Facebook to your user account there. If you have a user account with Facebook and are registered, Facebook can assign the visit to your user account.
As personal data may be transferred by Meta to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search.
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information from the third-party provider on data protection can be found on the following Facebook website: https://www.facebook.com/about/privacy. Information on Meta Pixel can be found on the following Facebook website: https://www.facebook.com/business/help/651294705016616.
You can make the relevant settings regarding which types of advertisements are displayed to you within Facebook on the following Facebook website: https://www.facebook.com/settings?tab=ads.
We would like to point out that this setting will be deleted if you delete your cookies. In addition, you can deactivate cookies that are used for reach measurement and advertising purposes via the following websites:
http://optout.networkadvertising.org/,
http://www.aboutads.info/choices
http://www.youronlinechoices.com/uk/your-ad-choices/
We would like to point out that this setting will also be deleted if you delete your cookies.
7. Microsoft Advertising (Bing Ads und Bing Conversion)
Our website uses Bing Ads from Microsoft Corporation One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft") for marketing and analysis purposes.
The service enables us to track activities on our site when you access our website via a Bing ad. This is done by setting a cookie (small text file) on your device when you click on a Microsoft Bing Ads ad if you have given your consent in accordance with Art. 6 para. 1 lit. a GDPR. A UET tag is also integrated on our websites. This is a code that is used in conjunction with the cookie to store pseudonymized data about the use of the website if you have given your consent. In combination with the cookie, the tag collects pseudonymized data in order to track which actions you take on our websites after you have clicked on an advertisement on Microsoft Ads. Among other things, the time spent on the website, which areas of the website were accessed and which ad brought you to the website are collected. In particular, Microsoft and we learn the total number of users who have clicked on an ad and reached a previously defined target page. Microsoft processes and uses cookies to create user profiles using pseudonyms, to analyze user behavior and to display advertisements. In addition, Microsoft can track your usage behavior across several of your electronic devices through so-called cross-device tracking.
This data is stored by Microsoft for 180 days.
As personal data is transferred to the Microsoft Corporation based in the USA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies certified under the EU-U.S. Data Privacy Framework. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: Participant Search (dataprivacyframework.gov).
Further information on data protection at Microsoft can be found on the following page: https://privacy.microsoft.com/de-de/privacystatement
8. Vimeo
Videos from "Vimeo" are integrated on this website. "Vimeo" is operated by Vimeo.com Inc, 330 West 34th Street, 5th Floor, New York, New York 10001, USA.
If you have given us your consent for this, the processing is carried out for the optimal marketing of our offer in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
The Google Analytics tracking tool is automatically integrated into videos from "Vimeo" that are embedded on our website. We have no influence on the tracking settings and the analysis results collected via this tool, nor can we view them. In addition, web beacons are set for website visitors via the embedding of "Vimeo videos".
In order to prevent the setting of Google Analytics tracking cookies, you can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and assurances from the recipient in the USA.
The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options for protecting your privacy can be found in the data protection information of "Vimeo" https://vimeo.com/privacy
9. Etracker (CWS customer portal)
We use etracker, a web analysis service provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany. The general terms and conditions are available at https://www.etracker.com/agb, the agreement on the commissioned processing of personal data at https://www.etracker.com/av-vertrag.
a) Description and scope of data processing
We use etracker to analyze the use of the customer portal. Etracker uses cookies, which are stored on your computer and enable your use of the customer portal to be analyzed. The information generated by the cookie about your use of the customer portal is generally transmitted to a server of Etracker GmbH in Hamburg and stored there.
This is the following information:
You can find more information about etracker cookies at https://www.etracker.com/support/etracker-cookies-2/. The customer portal only uses the following cookies: BT_ctst, BT_pdc, BT_sdc, _et_coid, noWS_mjV509.
However, if IP anonymization is activated on this website, your IP address will be shortened by etracker GmbH within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. This means that IP addresses are further processed in abbreviated form so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.
We use etracker analytics to analyze and regularly improve the use of our customer portal. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The legal basis for the use of etracker is Art. 6 para. 1 sentence 1 lit. a GDPR.
On behalf of the operator of the customer portal, etracker GmbH will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of etracker is not merged with other etracker data or passed on to third parties.
10. Infinity Call Tracking
This website uses Infinity Call Tracking, a service provided by Infinity Tracking Limited, Seebeck House 1 Seebeck Place, Knowlhill, Milton Keynes, Buckinghamshire, UK, MK5 8FR (“Infinity”), which tracks each visitor to our website and all interactions with the websites are tracked so that Infinity Tracking can determine which marketing source or sources (e.g. social media campaigns, paid advertising) a visitor coming to us comes from.
Infinity provides its own proprietary JavaScript technology that is deployed on our website; this script has no access to our network or infrastructure. This script makes it possible to monitor the website activity of our customers and potential customers. It also enables the tracking of calls from our customers. Consequently, Infinity processes the IP addresses of our customers and the telephone number used for our calls. All personal data processed is uploaded to the Infinity hub and displayed in full to authorized administrators of both the provider and the customer, and in anonymized form for all other authorized users.
With the help of Infinity's services, we can check how our customers access their website, website activity and the telephone calls made as a result.
Infinity processes the IP addresses and telephone numbers of customers and potential customers.
All the processing described above, in particular the setting of cookies for the storage and reading of information on the end device you are using to access the website, will only take place if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without your consent, Infinity will not be used while you are using the website.
We have concluded a so-called data processing agreement with Infinity Tracking, which obliges the provider to protect the data of our website users and not to pass it on to third parties.
Since Infinity may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection provided by the GDPR. For the United Kingdom, there is an adequacy decision by the EU Commission pursuant to Art. 45 (1) GDPR.
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 (2) point c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further legal information on Infinity Tracking can be found at the following link: https://www.infinity.co/uk/terms-and-conditions
11. Visual Website Optimizer (VWO)
On our website we use Visual Website Optimizer, a service of Wingify Software Pvt. Ltd. 404, Gopal Heights, Netaji Subhash Place, Pitam Pura, Delhi 110034, India and German subsidiary in Hamburg (Wingify Software Pvt. Ltd., Heidenkampsweg 58, Hamburg, 20097, Germany ("VWO").
With VWO, movements on the websites on which VWO is used can be tracked (so-called heat maps). For example, it is possible to see how far users scroll, which buttons are clicked and how often, how much time users spend on which pages, what they like and what they don't like, etc. With the help of VWO, it is also possible to obtain feedback directly from website users using a survey tool. In addition, we use VWO tests (so-called A/B tests, split tests & multivariant tests) to understand what effects adjustments to the user interface have. We use VWO technology to better understand the needs of our users and to optimize the offer and experience on our website.
In this context, we process the following data, among others:
VWO analyzes the use of our website completely anonymously, all personal data is automatically hidden and not processed. Areas of the website in which personal data of you or third parties are displayed are automatically hidden by VWO and are therefore not traceable at any time. In order to exclude the possibility of direct personal references, IP addresses are only stored and processed anonymously.
To this end, VWO works with cookies and other technologies to collect data about the behavior of users and their end devices. VWO stores this information on our behalf in a pseudonymized user profile.
We would like to point out that there is no adequate level of protection for the transfer of data to third countries. This could entail various risks for the lawfulness and security of data processing. Visual Website Optimizer uses so-called standard contractual clauses (= Art. 46. para. 2 and 3 GDPR) as the basis for data processing with recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, etc.) or data transfer there. Standard Contractual Clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as India). Through these clauses, Visual Website Optimizer undertakes to comply with the European level of data protection when processing your relevant data, even if this data is processed in a third country. These clauses are based on an Commission Implementing Decision. You can find this Commission Decision and the corresponding Standard Contractual Clauses here: Standard Contractual Clauses (SCC) - European Commission
The legal basis for the processing of your personal data is Art. 6 para. 1 lit. a GDPR (consent).
You can prevent the processing of your data by VWO at any time by not giving us your consent to the use of "behavioral cookies" on this website or by objecting to it.
Alternatively, you can generally prevent the collection of your data by VWO by deactivating the tool via the VWO opt-out page: https://vwo.com/opt-out/
Further information about Wingify Software Pvt. Ltd. and the VWO tool can be found at: https://vwo.com/
The privacy policy of Wingify Software Pvt. Ltd. can be found at: https://vwo.com/privacy-policy/
12. Lead Forensics
The website uses Lead Forensics. It is SaaS (Software as a Service), provided by Lead Forensics, Building 3000, Lakeside, North Harbour, Portsmouth, PO6 3EN (“Lead Forensics”). Lead Forensics provides our business with insight relating to our website visitors and works on the basis of reverse business IP tracking.
The Lead Forensics software identifies the businesses visiting our website via their IP address and match the business IP address to a by Lead Forensics wholly owned global database of businesses and business information. Lead Forensics does not identify any personal IP addresses, mobile devices or any other data than that associated with the business. IP addresses that cannot be matched are held securely during the validation process and are then purged.
Recipient of data:
Lead Forensics Limited
3000 Lakeside North Harbour, Portsmouth
Hampshire PO6 3EN / United Kingdom
We have concluded an order processing contract with Lead Forensics in accordance with Art. 28 GDPR.
Purposes of processing:
The purpose of the processing is to provide you with relevant product and company information. We use the data to provide insights to our sales and marketing functions in order to approach relevant stakeholders within those organisations, providing information about products and services offered by CWS.
Legal basis:
Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest). Processing is necessary to allow CWS to pursue its legitimate interests in contacting stakeholders within organisations that have shown an interest in CWS products and/or services.
However, business related data is not applicable under GDPR which aims to protect personal data. Therefore, the version of Lead Forensics solution used by CWS are not relevant to GDPR.
Storage period:
The data held within the Lead Forensics system is processed and stored in the UK within a secure environment.
Lead Forensics has a continual cycle of cleansing and refreshing data, all data within the Lead Forensics solution is verified at least once in a 12-month cycle. Any invalid records are placed into a deletion queue, which is then securely purged four times in a 12-month period.
Storage location of the data:
The storage of data in connection with the use of Lead Forensics takes place exclusively in the UK/EU. Data is not transferred to third countries.
Obligation to provide data:
You are not obliged to provide us with personal data when visiting our website in connection with Lead Forensics.
VII. Newsletter
1. Purpose and scope of processing, legal basis for processing
When you register for our newsletter, we process your master and contact data (name, email address) in order to send you the newsletter (including customer satisfaction surveys) by email (direct advertising). The legal basis for processing your data is your consent (Art. 6 (1) (a) GDPR).
If you give us separate consent to measure the success of our newsletter, we also collect statistical data on the reach of our newsletter (data on whether and how the newsletter is read and whether and by whom links inserted in the newsletter are clicked). We also use this data to send you personalized advertising. The legal basis for the processing of your data is your consent (Art. 6 para. 1 lit. a) GDPR).
The exact wording of your consent can be found on the website via which you gave your consent (e.g. contact form, newsletter registration). Consent to the sending of the newsletter and to the measurement of the newsletter's success can be revoked at any time with effect for the future. Newsletter recipients can declare their revocation by clicking on the "Unsubscribe" link provided in every newsletter or, for example, by sending an email to widerruf-de@cws.com. By clicking on the "Unsubscribe" link, both consents (if given) are revoked. If you send us an email to revoke your consent, please indicate which consent you wish to revoke.
In addition, we process your e-mail address in order to be able to carry out the proper registration for the newsletter (double opt-in procedure, i.e. you will receive a message to the e-mail address provided asking you to confirm your registration for the newsletter) and, if you unsubscribe from the newsletter, to ensure that you do not receive any further newsletters (inclusion on a blacklist). The legal basis for this processing is our legitimate interest (Art. 6 para. 1 lit. f) GDPR) in operating the newsletter in a legally compliant manner.
2. Responsible person and contact details
The respective CWS company named when registering for the newsletter is responsible for the processing described in section 1. You can view the individual CWS companies here. They are referred to as "CWS companies" in this Section VII (Newsletter). The CWS company responsible can also be found in the newsletter (see the footer). Occasionally, several CWS companies decide together with CWS International GmbH how the processing described in section 1. is carried out (e.g. if products of several CWS companies are advertised). In this case, the CWS companies and CWS International GmbH are jointly responsible.
It is agreed between the jointly responsible CWS companies that the CWS company named in the footer of the newsletter is responsible for information obligations and data subject rights under the GDPR vis-à-vis the data subjects. Furthermore, it is agreed that the jointly responsible companies will cooperate closely in fulfilling the obligations under the GDPR and, in particular, will provide each other with the necessary information to properly fulfill information obligations and data subject rights.
If you have any questions about data processing or wish to exercise your rights as a data subject, you can contact our data protection officer by post (CWS International GmbH - Data Protection Officer -, Franz-Haniel-Platz 1b, 47119 Duisburg) or by email (datenschutzbeauftragter@cws.com). You are also free to contact any of the jointly responsible companies (e.g. to exercise your rights).
3. Storage duration
If the processing is based on consent, the data will be deleted after you withdraw your consent or unsubscribe from the newsletter. After revocation, we can only continue to process your data if we still need it for another purpose and are allowed to process it in accordance with data protection regulations (e.g. e-mail address to answer a contact request you have made) or if we have to retain the data to fulfill legal retention obligations. If you unsubscribe from the newsletter, your e-mail address will remain stored in a blacklist so that you do not receive any further newsletters. In order to carry out the registration process (double opt-in procedure), we store your e-mail address for 14 days on a list of addresses that have been pre-notified for the newsletter.
4. Transfer of personal data to other persons and recipients in third countries
If you have given your consent, your data will be passed on to the CWS companies named in the declaration of consent (you can see which CWS companies these are here). Furthermore, we and the other CWS companies may use service providers and commission them with data processing (e.g. to send the newsletter or carry out performance measurement). These service providers are bound by us to data protection and only act on our instructions.
our personal data is stored exclusively in Germany. As a matter of principle, we do not transfer your data to recipients based outside the European Union.
VIII.Contact form and email contacts
1. Description and scope of data processing
Processing your name and contact information to provide you with information about our products, to manage your registration, to register and participate in our events, webinars, to manage your registration for competitions or promotions, to provide customer support or when we communicate with you in other ways.
There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are
Mandatory:
Voluntary:
The following data is also stored at the time the message is sent:
Your consent is obtained for the processing of the data as part of the sending process and reference is made to this data protection information.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
No data will be passed on to third parties in this context. The data is used exclusively for processing the conversation.
2. Legal basis of the processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.
The legal basis for processing the data transmitted in the course of sending an e-mail is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR.
If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
3. Purpose of data processing
The processing of the personal data from the input mask serves us solely to process the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
5. Objection and removal options
The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. To revoke your consent and to object to the storage of your data, you can use the email address used to contact us or the email address given in the legal notice.
All personal data stored in the course of contacting us will be deleted in this case.
IX. CWS Assistant (chatbot)
You can use the CWS Assistant (chatbot) on our website for questions about customer service and our products. The automated bot is a product of Qodea Ltd, Lowry House, 17 Marble Street, Manchester / United Kingdom.
To ensure that a user who has already started a conversation with the chatbot is recognized again after a break, an anonymous identifier is stored with the user at the start of a conversation. This ensures that the user dialog can be continued over multiple website visits without losing the context. Chat histories are deleted after 90 days at the latest. Information on data protection of the name of the chatbot company can be found here: https://qodea.com/privacy-policy /
Recipients of data:
Qodea Limited Lowry House, 17 Marble Street
M2 3AW Manchester / Great Britain
We have concluded an order processing contract with the company Qodea in accordance with Art. 28 GDPR.
Processing purposes:
The purpose of the processing is to provide you with an uncomplicated means of contact. After starting a chat, we store various information in local storage. The storage of this content is technically necessary for the use of the chat and serves to recognize your chat with all individual messages for one hour. This ensures that the chat is retained for one hour, even if you leave or pause it in the meantime. After that, the chat can no longer be assigned, is archived and deleted after 14 days at the latest.
Legal basis:
§ Section 25 (2) no. 2 TDDDSG for the storage of local storage keys in the end device and access to information in the end device;
Art. 6 para. 1 sentence 1 lit. b GDPR (contract), insofar as you contact us in the context of a contract or the initiation of a contract;
Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest). The legitimate interest arises from the provision of the chat contact option, for which the data is processed for technical and content-related error analysis as well as for further development (inclusion of new responses), without which the chatbot would not function.
Storage duration:
In the browser until deleted by the user or when the user opens the chat widget, in the Qodea platform after 1 hour. The chat history is stored for a maximum of 14 days in order to train the system and to be able to respond better to chat requests in the future. After that, the chat history is irrevocably deleted.
Storage location of the data:
The storage of data in connection with the use of the chatbot takes place exclusively in the EU. Data is not transferred to third countries.
No automated decision-making:
Automated decision-making, including profiling, is not carried out by the chatbot.
Obligation to provide data:
You are not obliged to provide us with personal data in connection with the chat function. If you do not provide us with certain required information in connection with the processing of a contract, we may not be able to process your request any further.
X.CWS customer portal
1. Description and scope of data processing
We provide you with the CWS customer portal, with which you can manage your contracts concluded with CWS and view invoices and delivery bills.
On the homepage of the portal, we offer you the option of registering for certain services provided on our website and thus creating a user profile.
The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties.
We use the so-called double opt-in procedure to register for our customer portal. This means that after you have registered, we will send you an email to the email address you have provided, in which we ask you to confirm that you wish to register for the customer portal. If you do not confirm your registration within 48 hours, your information will be blocked and automatically deleted after one month.
We collect and use the following personal data as part of the registration and setup process:
In addition, voluntary information can be provided (e.g. position/role, desired username, additional information etc). Mandatory information provided for the purpose of registration is marked with an asterisk as a mandatory field in the input mask. Your user account gives you the opportunity to use other parts of our website and to log in to the offers you have purchased. The legal basis for data processing with consent is Art. 6 para. 1 lit. a GDPR or Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary to provide the desired services
2. Purpose of data processing
Your registration is not for the purpose of concluding a contract: Your registration is required for the provision of certain content and services on our website.
The purpose of collecting data during the registration process is to assign the correct contracts to the applicant so that they can actually only manage their contracts and view the associated invoices and delivery bills.
The collection of other data as part of the registration process serves to prevent misuse of the services or the email address used.
3. Duration of storage
The data will be deleted as soon as you finally delete your account and your data is no longer required for the fulfillment of the contract. Furthermore, we store the voluntary data provided by you for the period of your use, unless you delete it beforehand.
Your data will be deleted as soon as the user account on our website is deleted and insofar as there are no statutory retention obligations. You can usually change and/or delete your user account, including the data you have provided, directly in your user account after logging in or by sending a corresponding message to the controller named at the beginning.
The other personal data collected during the registration process is generally deleted after a period of 7 days.
4. Possibility of objection and removal
You can permanently delete your access to the customer portal at any time by following the steps explained in the customer portal. However, this does not cancel your existing contract, which remains unaffected by this.
XI. Integration of YouTube videos
On our website, we embed videos from "YouTube", a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). The legal basis for the processing of your personal data in this context is your consent given in accordance with Art. 6 para. 1 lit. a GDPR.
If the playback of embedded YouTube videos is started with your consent, a server call is made, usually to a Google server in the USA. This tells the server which page you have accessed and the IP address of the browser of the visitor's end device is transmitted to Google and stored by Google.
If you are logged in to Google, your data may also be assigned to your account by Google when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. Google stores this data as a user profile and uses it for the purposes of advertising, market research and/or the needs-based design of its websites. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.
As personal data may be transferred by Google to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy?hl=de&gl=de
XII. Integration of Google Maps
Our website uses the online map service provider Google Maps via an interface. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to save your IP address.
Google uses cookies to collect information about user behavior. The legal basis for the processing of your personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG.
DAs personal data may be transferred by Google to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on the handling of user data can be found in Google's privacy policy:https://www.google.de/intl/de/policies/privacy/
Opt-out: https://www.google.com/settings/ads/
XIII. Integration of Google Fonts
We use "Google Fonts" on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: "Google"). Google Fonts enables us to use external fonts. For this purpose, the required Google Fonts are loaded into your browser cache by your web browser when you access our website. This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this function, a standard font from your computer will be used for display. These Google fonts are integrated by a server call, usually a Google server in the USA. This tells the server which page of our website you have visited. The IP address of the browser of the visitor's end device is also stored by Google.
We use Google Fonts for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent. This consent can be revoked at any time with effect for the future.
As personal data may be transferred by Google to affiliated companies and subcontractors in countries outside the EU and the EEA, further protective mechanisms are required to ensure the level of data protection under the GDPR. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search
For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.
Further information on data protection can be found in Google's privacy policy: http://www.google.de/intl/de/policies/privacy
Further information on Google Fonts can be found at https://fonts.google.com/
XIV. Online presence in social media
External links:
Social networks (LinkedIn, Facebook, Instagram, YouTube, TikTok) are only integrated on our website as a link to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been forwarded. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you use.
We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our data protection information, we process users' data if they communicate with us within social networks and platforms, e.g. write posts on our online presences or send us messages.
XV. Data security
We take appropriate technical and organizational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.
XVI. Rights of data subjects
Below you will find information on the data subject rights granted to you by the applicable data protection law vis-à-vis the controller with regard to the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
The right to demand the immediate correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR.
The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
The right to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you dispute the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.
The right, pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller.
The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.
The right to withdraw consent granted in accordance with Art. 7 (3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
1. Right of objection
If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without the requirement to specify a particular situation.
If you wish to exercise your right of revocation or objection, simply send an e-mail to datenschutzbeauftragter@cws.com
XVII. Legal obligations
The provision of personal data for the decision on the conclusion of a contract, the fulfillment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide such personal data that is necessary for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures.
XVIII.Automated decision making
Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.
XIX. Subject to change
We reserve the right to adapt or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.
Status of this privacy policy: 12.12.2024
