Privacy

Data protection declaration

1. General

W. Tiemann GmbH & Co. KG (hereinafter also referred to as ‘we’) takes the protection of your personal data very seriously and places the highest value on compliance with data protection regulations. With this data protection declaration, we are informing you in accordance with Art. 13 of the EU General Data Protection Regulation (‘GDPR’) about the type, scope and purposes of the collection, processing and use of your personal data (‘data’). Personal data is information that relates to an identified or identifiable natural person.

We process your personal data in accordance with the principles of data avoidance only to the extent that it is necessary, permitted, required or consented to.

2. Controller and data protection officer

The controller for the processing of personal data is:

W. Tiemann GmbH & Co. KG

Neuenlander Str. 41-43

28199 Bremen

info@tiemann.eu

The following person has been appointed as the Group Data Protection Officer:

Certified Data Protection Officer (TÜV) of the Tiemann Group

Torben Mißy

DDA Digital Data Advice GmbH

Winkelsfelder Straße 35

40477 Düsseldorf

+49 211 944 03 64

torben.missy@digital-data-advice.de

www.digital-data-advice.de

 

3. Use of the company website

It is generally possible to use our website without providing personal data. Insofar as personal data is collected on our pages, this is always done on a voluntary basis as far as possible.

Data security

Personal data is encrypted using Secure Socket Layer (SSL) for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Our website is protected by technical and organisational measures against loss, destruction, access, modification or distribution of personal data by unauthorised persons.

Cookies
a) Session cookies

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored on your device by the internet browser you use. These cookies process certain information about you, such as your browser or location data or your IP address, to an individual extent. This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, our website to be displayed in different languages or a shopping cart function to be offered. When you close your internet browser, these session cookies are deleted.

The legal basis for this processing is Art. 6 Para. 1 lit. b GDPR, insofar as these cookies are used to process data for the purpose of contract initiation or contract execution. If the processing does not serve the purpose of contract initiation or contract execution, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

b) Third-party cookies

Our website may also use cookies from partner companies with whom we cooperate for the purpose of advertising, analysing or improving the functionality of our website. Please refer to the following information for details, in particular for the purposes and legal basis of processing such third-party cookies.

c) Removal option

You can prevent or restrict the installation of cookies by adjusting the settings on your internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific internet browser you are using. If you have any questions, please use the help function or consult the documentation for your internet browser or contact its manufacturer or support team. However, browser settings cannot prevent the processing of so-called flash cookies. Instead, you will need to change the settings of your Flash player. The steps and measures required for this also depend on the Flash player you are actually using. If you have any questions, please also use the help function or documentation for your Flash player or contact the manufacturer or user support.

However, if you prevent or restrict the installation of cookies, this may mean that not all of the functions on our website are fully usable.

Server data

For technical reasons, in particular to ensure a secure and stable internet presence, data is transmitted to us or to our web space provider by your internet browser. These server log files record the type and version of your browser, operating system, the website from which you came (the referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.

The data collected in this way is temporarily stored, but not in association with any other of your data. This data is not merged with data from other sources.

The basis for this storage is Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the stability, functionality, and security of our website.

The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. Otherwise, the data will be exempt from erasure, in whole or in part, until the final clarification of an incident.

Contact form

If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions.

The processing of the data entered into the contact form is thus carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. To do so, an informal message to us by e-mail is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Google Maps

This site uses the Google Maps map service via an API to display geographical information in a visually appealing way and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the Google Maps features, it is necessary to store your IP address. This information is generally transmitted to and stored by Google on servers in the United States. The provider of this site has no influence on this data transfer. For more information on how to handle user data, please refer to the Google Privacy Policy:

 

Google Fonts

We use Google Fonts on our website to display external fonts. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as ‘Google’.

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active,

Google guarantees that it will follow the EU's data protection regulations when processing data in the United States.

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established whenever our website is accessed. The legal basis is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest lies in the optimisation and economic operation of our website. Through the connection to Google established when you access our website, Google can determine from which website your request has been sent and to which IP address the display of the font is to be transmitted.

Google offers

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

further information, in particular on how to prevent the use of data.

YouTube

We use YouTube on our website. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as ‘YouTube’. YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as ‘Google’.

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active,

Google and its subsidiary YouTube guarantee that they will follow the EU's data protection regulations when processing data in the United States.

We use YouTube in conjunction with the ‘extended data protection mode’ function to show you videos. The legal basis is Art. 6 (1) point f GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the ‘extended data protection mode’ function ensures that the data specified below is only transmitted to the YouTube server if you actually start a video. Without this ‘extended data protection’, a connection to the YouTube server in the USA is established as soon as you access one of our websites on which a YouTube video is embedded.

The connection is necessary to be able to display the respective video on our website via your internet browser. In the course of this, YouTube will at least collect and process your IP address, the date and time, and the website you visited. In addition, a connection to the Google advertising network ‘DoubleClick’ is established.

If you are logged in to YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

For the purpose of functionality and to analyse user behaviour, YouTube permanently stores cookies on your end device via your internet browser. If you do not agree to this processing, you have the option to prevent the storage of cookies by making the appropriate settings in your internet browser. You can find more information about this under ‘Cookies’ above.

Further information about the collection and use of data as well as your rights and protection options in Google's privacy policy, which can be found at

https://policies.google.com/privacy

.

‘Facebook’ social plug-in

We use the plug-in of the social network Facebook on our website. Facebook is an online service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; both are hereinafter referred to as ‘Facebook’.

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active,

Facebook guarantees that it will follow the EU's data protection regulations when processing data in the United States.

The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.

Further information about the possible plug-ins and their respective functions is available from Facebook at

https://developers.facebook.com/docs/plugins/

.

If the plug-in is stored on one of the pages of our website that you visit, your internet browser will download a representation of the plug-in from the Facebook servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to our website are also recorded.

If you are logged into Facebook while visiting one of our plug-in-enabled websites, the information collected by the plug-in during your specific visit will be recognised by Facebook. Facebook may assign the information collected in this way to your personal user account. For example, if you use the Facebook ‘Like’ button, this information will be stored in your Facebook user account and may be published on the Facebook platform. If you wish to prevent this, you must either log out of Facebook before visiting our website or use an add-on for your internet browser to prevent the Facebook plug-in from loading.

Further information about the collection and use of data as well as your rights and protection options in Facebook's privacy policy, which can be found at

https://www.facebook.com/policy.php

.

4. Legal basis for the processing of personal data

Art. 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required for the fulfilment of contractual obligations to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.

In addition, we process your data to safeguard our legitimate interests as the responsible party or the interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail (Art. 6 para. 1 lit. f GDPR).

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Insofar as the processing of your personal data is required for the fulfilment of legal or regulatory requirements to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

In addition, we process your data if you have expressly agreed to this in advance and have therefore given your consent(Art. 6 (1) lit. a GDPR).

5. Changes to this privacy policy

We reserve the right to change this data protection policy at any time with effect for the future. The current version is available on the website. Please visit the website regularly and familiarise yourself with the applicable data protection policy.

6. Data erasure and storage period

If there is no longer a legal basis for processing your data, we will delete the data or, if this is not possible, block any personal reference to you in our systems in accordance with data protection regulations.

Storage beyond this period is possible if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

7. Disclosure of your data to third parties

We do not pass on your personal data to third parties unless you have consented to such data transfer or we are entitled or obliged to do so on the basis of another legal basis for permission. Data will not be transferred to countries outside the EU unless we are obliged to do so due to official or court orders or you have expressly consented to a transfer to countries outside the EU.

8. Contract data processing

We use processors (e.g. IT service providers, postal service providers) within the EU to provide our services. Your data is passed on to them in strict compliance with confidentiality and the provisions of the GDPR and the Federal Data Protection Act. We have concluded proper agreements for order processing with the processors we commission, who may only process the data for us and not for their own purposes, in accordance with Art. 28 GDPR. We ensure that our service providers take all organisational and technical measures necessary to protect your data by carefully selecting them and regularly monitoring them.

9. Information about your rights

You have the following rights with respect to us regarding your personal data:

Right of access: You have the right to request information free of charge about the data stored by us, in particular for what purpose the processing is carried out and how long the data is stored (Art. 15 GDPR).

Right to rectification of inaccurate data: You have the right to request that we correct your personal data without delay if it is inaccurate (Art. 16 GDPR).

Right to erasure (right to be forgotten): You have the right to request that we delete your personal data. You can request the deletion of your data if, for example, we no longer need the personal data for the purposes for which it was collected or otherwise processed, if we process the data unlawfully or if you have justifiably objected to the processing or if you have withdrawn your consent or if there is a legal obligation to delete it (Art. 17 GDPR).

Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, from us in a structured, commonly used and machine-readable format (Art. 20 GDPR), insofar as it has not already been deleted.

Right to file a complaint with the supervisory authority: If you believe that we have violated the GDPR by processing your personal data, you have the right to file a complaint with a supervisory authority, e.g. with the data protection authority responsible for your place of residence, your workplace or the place of the data protection violation. A list of data protection officers and their contact details can be found at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

For further information or to assert your rights, please contact us by email at datenschutz@tiemann.eu or write to us at W. Tiemann GmbH & Co. KG, Neuenlander Str. 41-43, 28199 Bremen.

10. Objection to or revocation of consent to the processing of your data

You may revoke your consent to the processing of personal data at any time, free of charge and with effect for the future. This also applies to declarations of consent issued before the GDPR came into force. Please note that the lawfulness of the data processing carried out up to the point of revocation remains unaffected and the revocation is only taken into account from the time of our receipt and then for the future.

The revocation of a declaration of consent can be done informally by email to datenschutz@tiemann.eu or in writing to W. Tiemann GmbH & Co. KG, Neuenlander Str. 41-43, 28199 Bremen.

11. Objection to advertising e-mails

We hereby object to the use of the contact data published in accordance with the imprint obligation and the data protection declaration for sending unsolicited advertising and information material. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam e-mails.